Cleartext

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 10 stories across 5 topic areas, including: Risky Bulletin: Operation Endgame dismantles Amadey and StealerC; Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks; China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor.

Risky Business News · Jun 26 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Law enforcement's takedown of two major malware-as-a-service operations (Amadey and StealerC) directly reduces active threat infrastructure targeting enterprises; the Australia 'digital dynamite on critical networks' finding warrants attention for critical infrastructure operators.

📖 Read full article

The Hacker News · Jun 26 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Google Threat Intelligence's attribution of a new .NET backdoor to Turla—actively deployed against government and military targets—signals continued Russian APT capability development that enterprises with government contracts or NATO-adjacent supply chains must track.

📖 Read full article

Infosecurity Magazine · Jun 26 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A China-nexus threat group deploying a custom backdoor against Southeast Asian critical infrastructure reinforces the persistent CNI targeting trend and raises third-party risk concerns for multinationals operating in the region.

📖 Read full article

Help Net Security · Jun 26 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: With ransomware attacks against European organizations accelerating and third-party suppliers emerging as the primary attack vector, CISOs with EU operations or supply chains must reassess vendor risk programs against the backdrop of converging NIS2 and DORA obligations.

📖 Read full article

BankInfoSecurity · Jun 26 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: This roundup consolidates several active incidents—Cisco SD-WAN exploitation, Ubiquiti zero-days, INC ransomware activity, and cross-cloud bucket hijacking research—providing a concise threat picture for security operations briefings.

📖 Read full article

CyberScoop · Jun 25 · Relevance: ████████░░ 8/10

Why it matters to CISOs: New FCC rules overhauling national emergency alert systems and imposing federal security review requirements on undersea cable providers create direct compliance obligations for telecoms, ISPs, and the enterprises that depend on them for resilient connectivity.

📖 Read full article

The Record (Recorded Future) · Jun 25 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: CISA's planned 600-person hiring surge and imminent director appointment will shape the agency's operational posture, affecting how enterprises receive threat intelligence, respond to KEV advisories, and engage on sector-specific guidance.

📖 Read full article

Cybersecurity Dive · Jun 25 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Stricter cyber insurance underwriting standards are increasingly tied to measurable security controls, making insurance renewals a de facto security audit that CISOs must prepare for with documented resilience evidence.

📖 Read full article

Help Net Security · Jun 26 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The Linux Foundation's Akrites initiative establishes an industry-backed common framework for open-source vulnerability remediation and disclosure, directly affecting how enterprises receive and act on CVE information for the OSS components in their software supply chains.

📖 Read full article

Infosecurity Magazine · Jun 25 · Relevance: █████████░ 9/10

Why it matters to CISOs: A high-severity Cisco Catalyst SD-WAN Manager flaw being actively exploited as far back as March—three months before public disclosure—illustrates the zero-day dwell-time problem for enterprises running widely deployed SD-WAN infrastructure.

📖 Read full article

Alex: Welcome to Cleartext. It's Friday, June 26th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. Let's get into it.

Alex: Jordan, you wanted to lead with the Cisco SD-WAN story today and I think that's the right call.

Jordan: Yeah. So Google's Mandiant team published details on a high-severity flaw in Cisco Catalyst SD-WAN Manager that was being actively exploited as far back as March. The vulnerability wasn't publicly disclosed until June. That's a three-month dwell time where attackers had free rein on one of the most widely deployed SD-WAN platforms in the enterprise. And the sophistication of the exploitation activity suggests this wasn't script kiddies. We're talking nation-state or top-tier criminal operators.

Alex: And this is the part that should land hard for anyone listening. If you patched the day Cisco disclosed, you were already three months late. The real action item here is retrospective investigation. You need to go back and look for indicators of compromise in your SD-WAN infrastructure from March forward. Patching closed the door, but someone may have already been inside.

Jordan: Exactly. And this ties into the broader breach roundup from BankInfoSecurity this week. Mandiant's SD-WAN findings were part of a cluster that also includes three Ubiquiti vulnerabilities under active exploitation, INC ransomware activity, and some interesting research on cross-cloud bucket hijacking. For security operations teams, this is a dense week. The Ubiquiti flaws hit networking gear that's common in branch offices, so if you're running distributed infrastructure, check your exposure.

Alex: Good segue, because dense is the word for the threat landscape this week. Let's talk about the state-sponsored activity, because there's a lot of it and it paints a coherent picture.

Jordan: Three distinct stories, three different nation-state actors, all dropped on the same day. First, Google Threat Intelligence published a detailed write-up on Turla, the Russian FSB-linked group, deploying a new .NET backdoor called STOCKSTAY. Primary targets are Ukrainian government and military, which is expected. What's less expected is the targeting of entities with ties to Italian foreign policy, which broadens the geographic risk profile significantly.

Alex: And for CISOs at organizations with government contracts or NATO-adjacent supply chains, this is directly relevant. Turla doesn't limit itself to Ukrainian targets. They follow the intelligence priorities of the Russian state, and right now those priorities include fracturing Western European consensus. If your organization touches defense, diplomacy, or energy policy in Europe, you're in the aperture.

Jordan: Second story. China-linked actors deploying a custom backdoor called TinyRCT against critical infrastructure in Southeast Asia. The custom tooling is the important detail here. When a threat group invests in bespoke malware rather than repurposing commodity tools, it tells you two things: they're well-resourced, and they care about operational security. They don't want to be detected and they don't want the capability burned.

Alex: And for multinationals with operations in the region, this is a third-party risk story as much as a direct targeting story. Your Southeast Asian suppliers, your joint ventures, your regional data centers, they're all potential vectors. The pattern of Chinese APT activity against critical national infrastructure ahead of geopolitical flashpoints is well established at this point. We saw it before the Taiwan Strait tensions, we're seeing it again now.

Jordan: And the third piece is the most visceral. Australia's intelligence services found what they described publicly as "digital dynamite" embedded on critical infrastructure networks. That's not analyst hyperbole; that's the Australian government using that language deliberately. At the same time, Japan's military discovered infected USB drives in active use within their defense ecosystem. These are allied nations in the Five Eyes and Quad frameworks finding pre-positioned threats in their most sensitive environments.

Alex: Let me connect these three threads for the board-level audience. We are watching real-time preparation of the cyber battlespace by multiple state actors simultaneously. Russia maintaining persistent access in Europe through Turla. China pre-positioning in Southeast Asian infrastructure. And allied nations discovering embedded threats they didn't know were there. If you're a CISO at a critical infrastructure operator, this is the week you update your board on nation-state risk and make sure your threat model reflects the current geopolitical reality, not the one from 18 months ago.

Jordan: Now let's talk about some good news, which doesn't happen often on this show. Operation Endgame expanded this week. Europol and partner agencies dismantled the Amadey botnet and the StealerC credential-theft malware operation. These were major malware-as-a-service platforms. Amadey was a loader botnet used to distribute secondary payloads, and StealerC was exactly what the name suggests: a credential harvesting operation at scale.

Alex: This is the kind of law enforcement action that actually moves the needle. These aren't symbolic arrests; these are infrastructure takedowns that force threat actors to rebuild. It doesn't eliminate the threat, but it creates friction. It raises the cost of doing business for cybercriminals. And if your organization was seeing Amadey or StealerC indicators in your environment, you should be tracking whether those command-and-control channels have gone dark and using that window to clean up any residual compromise.

Jordan: Agreed. Credit where it's due. The sustained international coordination on Endgame has been impressive.

Alex: Let's shift to the supply chain and regulatory picture in Europe, because there's a report from Black Kite that quantifies something we've been talking about for months. They analyzed over 2,000 ransomware incidents across 31 European countries between January 2025 and April 2026, and the headline finding is that third-party suppliers have overtaken direct enterprise targeting as the primary ransomware entry point.

Jordan: That's not a surprise to anyone who's been paying attention, but having the data is useful. It validates the investment thesis for vendor risk programs.

Alex: It does, and it makes the NIS2 and DORA compliance conversation much more concrete. Those regulations explicitly address supply chain security obligations. If your third-party risk program is still based on annual questionnaires and SOC 2 reports, you're not meeting the spirit of what European regulators are building toward. The Black Kite data gives you ammunition to go to your board and say: the regulatory pressure and the threat data are aligned. We need to invest in continuous vendor monitoring.

Jordan: And speaking of regulatory movement, two governance stories worth flagging. The FCC adopted new rules this week overhauling security requirements for national emergency alert systems and imposing federal security review for undersea cable providers. If you're in telecom or if your business continuity depends on submarine cable connectivity, which it does for most global enterprises, these rules affect your risk posture.

Alex: The emergency alert system piece is particularly interesting. The FCC is explicitly addressing the hijacking risk for national alert infrastructure. This is the kind of systemic risk that most CISOs don't think about until it's too late. And the undersea cable rules reflect the reality that those cables are strategic assets, not just commercial infrastructure.

Jordan: Second governance item: DHS Secretary Mullin confirmed that the president has met with a likely CISA director nominee, and once confirmed, the agency plans to hire 600 additional staff. No formal announcement yet, but the signal is clear. CISA is going to ramp back up.

Alex: This matters for how enterprises receive threat intelligence, how KEV advisories get prioritized, and how sector-specific guidance evolves. A fully staffed CISA with permanent leadership is good for everyone. Watch this space.

Jordan: Two more quick hits. Cyber insurance underwriters are tightening the screws again. Claims eligibility is increasingly tied to adherence to specific security controls, not just having a policy. Renewals are becoming de facto security audits. CISOs need documented evidence of resilience, not just assertions.

Alex: I've been saying this for two years. Your insurance renewal prep should look like your audit prep. Have your MFA coverage data, your backup testing results, your incident response tabletop records ready. Insurers are getting sophisticated about what they ask for, and exclusions are getting more specific.

Jordan: And finally, the Linux Foundation launched Akrites, an industry-backed framework for coordinating open-source vulnerability remediation and disclosure. The explicit motivation is that AI is shortening the window between flaw discovery and exploitation, so the open-source ecosystem needs a faster, more standardized response process.

Alex: This is a software supply chain story. If your application stack depends on open-source components, and it does, then how those communities handle vulnerability disclosure directly affects your patching timelines. Akrites is trying to industrialize that process, and major tech companies and financial institutions are backing it. Worth tracking how it evolves.

Jordan: So Alex, stepping back and looking at the week, what's the thread?

Alex: The thread is convergence. The threat actors are converging on supply chains and pre-positioned access. The regulators are converging on accountability, whether that's NIS2, DORA, or the FCC. And the insurance market is converging on verifiable controls. For CISOs, this means the gap between what you tell your board and what you can actually demonstrate is getting smaller. Assertions without evidence are going to get you in trouble, whether it's with your insurer, your regulator, or the threat actor who's already in your supplier's network.

Jordan: I'd add one thing. The Cisco SD-WAN story is the canary. Three months of pre-disclosure exploitation on widely deployed infrastructure. If your detection capabilities aren't good enough to catch that kind of activity independently of vendor disclosure, that's the gap you need to close. Don't wait for the CVE. Assume someone already found it.

Alex: That's a great note to end on. That's Cleartext for Friday, June 26th, 2026. Show notes and links to every story we covered today are at cleartext.fm.

Jordan: Have a good weekend. Stay sharp.

Alex: We'll see you Monday.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-26.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 5 topic areas, including: In a first, a court takedown goes after two cybercrime tools at once; Srsly Risky Biz: Open weight models make the Mythos debate moot; Europe Evolves Into Ransomware's Favorite Region.

CyberScoop · Jun 24 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The simultaneous court-authorized disruption of Amadey and StealC—two tools frequently used together as an initial-access-to-infostealer pipeline feeding ransomware—represents a new legal strategy with real near-term impact on credential theft volumes targeting enterprise environments. CISOs should monitor for reduced infostealer activity but not stand down defenses.

📖 Read full article

Risky Business News · Jun 25 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Five Eyes agencies formally acknowledging that AI-enabled offensive cyber capabilities can no longer be contained by export controls is a strategic inflection point—CISOs should factor the democratization of AI-assisted attacks into threat modeling and board-level risk narratives.

📖 Read full article

Dark Reading · Jun 25 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A 50%+ surge in ransomware targeting EU organizations over the past year, combined with rising supply chain attack vectors, directly affects CISOs with European operations, subsidiaries, or third-party suppliers—particularly given NIS2 mandatory incident reporting timelines now in force.

📖 Read full article

The Hacker News · Jun 25 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Gaslight represents a first-in-class threat tactic where malware actively sabotages AI-assisted malware analysis tools used by SOC teams—CISOs integrating AI into incident response and triage workflows must account for adversarial prompt injection as a technique to blind their detection pipelines.

📖 Read full article

Dark Reading · Jun 24 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Malicious packages containing infostealers reaching the ClawHub AI skills marketplace—bypassing security checks—signals that AI agent supply chain risk is materializing in the same pattern as npm/PyPI attacks, requiring CISOs to extend software composition analysis to AI skill and plugin ecosystems.

📖 Read full article

The Record (Recorded Future) · Jun 24 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A ransomware attack on one of India's largest automotive manufacturers—disclosed via regulatory filing—underscores the continued targeting of major industrial conglomerates and the regulatory disclosure obligations CISOs must manage under SEBI and equivalent frameworks.

📖 Read full article

Cybersecurity Dive · Jun 24 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The stalling of the federal-state critical infrastructure cybersecurity pilot program signals continued fragmentation in US national cyber defense coordination—CISOs in regulated critical infrastructure sectors should not count on federal-state partnership initiatives materializing for near-term planning purposes.

📖 Read full article

The Hacker News · Jun 25 · Relevance: █████████░ 9/10

Why it matters to CISOs: A zero-day exploited two months before disclosure against a communications service provider—granting root access on Cisco SD-WAN infrastructure—demands immediate patching and threat hunting across any organization running Catalyst SD-WAN. Mandiant attribution and the communications sector targeting suggest sophisticated, likely nation-state-adjacent actors.

📖 Read full article

The Hacker News · Jun 24 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A newly identified CI/CD workflow weakness class enables full attacker control of repositories at major organizations including Microsoft, Google, and Apache—CISOs running GitHub-based pipelines must audit for this pattern immediately given the software supply chain risk and potential for silent backdooring of build artifacts.

📖 Read full article

Alex: Welcome to Cleartext. It's Thursday, June 25th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. Let's get into it.

Alex: We've got a packed show today. Microsoft and Europol just executed something genuinely new in cybercrime disruption. Five Eyes agencies are waving a flag on AI-enabled offense. Europe is becoming ransomware's favorite hunting ground. We've got a Cisco SD-WAN zero-day that's been exploited for two months before anyone knew about it. And a fascinating piece of malware that's literally gaslighting your SOC's AI tools. Let's start big.

Jordan: So the Microsoft-Europol action. On the surface, another takedown, another press release. But this one is structurally different and CISOs should pay attention to why. For the first time, a court-authorized operation targeted two distinct cybercrime tools simultaneously—Amadey and StealC—because they function as an assembly line. Amadey gets initial access, StealC harvests credentials, and that pipeline feeds directly into ransomware operations. Microsoft and partners took down over 200 command-and-control servers. More than 300 servers seized or disrupted globally. And they recovered 27 million stolen credentials.

Alex: The strategic shift here is the legal innovation. Previous takedowns targeted individual botnets or individual malware families. This is the first time the legal framework was constructed to go after two tools as a connected criminal workflow. That matters because it reflects how cybercrime actually operates—as a supply chain, not as isolated tools. The court order recognized that reality.

Jordan: Exactly. And this is part of the broader Operation Endgame framework, which Europol has been running. The participating organizations—Bitdefender, Bitsight, ESET, Microsoft—are essentially operating as a standing coalition. Now, will Amadey and StealC operators rebuild? Almost certainly. But the disruption has a real cost function. Rebuilding C2 infrastructure takes time and money, and during that window, the infostealer pipeline feeding ransomware operators is degraded.

Alex: For CISOs, the practical takeaway is this: you may see a near-term reduction in credential theft volume from these specific tools. Do not mistake a temporary lull for a trend. Your infostealer defenses, your credential monitoring, your dark web exposure assessments—none of that changes. But do track the disruption as a data point when you're briefing your board on the threat landscape.

Jordan: Which brings us directly to the Five Eyes AI warning, because these two stories are connected. The Five Eyes cybersecurity agencies—US, UK, Canada, Australia, New Zealand—issued a formal acknowledgment that AI-enabled offensive cyber capabilities can no longer be contained through export controls or model restrictions. The genie is out of the bottle. Their words, essentially.

Alex: This is a strategic inflection point and I want CISOs to understand why. For the last two years, there's been a policy debate about whether restricting access to frontier AI models could limit offensive cyber capability. The Five Eyes agencies just formally conceded that argument is over. Open-weight models have made it moot. Any moderately sophisticated threat actor can fine-tune an open model for vulnerability discovery, phishing generation, or exploit development. The Mythos debate—whether AI meaningfully changes offensive capability—is settled in the affirmative.

Jordan: And the practical implication is that the asymmetry defenders have relied on—that offensive AI tooling requires significant resources—is collapsing. CISOs need to update their threat models. When you're doing your annual risk assessment, when you're presenting to the board, the assumption should now be that your adversaries have AI-augmented capabilities regardless of who they are. That's not speculation anymore. That's the assessed position of Five Eyes intelligence agencies.

Alex: The Five Eyes statement also references Operation Endgame as the model for how you deal with this—continuous disruption rather than containment. Which tells you something about where national cyber strategy is heading: accept that the tools are proliferated, focus on disrupting the operators.

Jordan: Let's shift to Europe, because the targeting data is stark. Black Kite's analysis shows ransomware attacks targeting European organizations increased by over 50 percent in the last year. And the primary vector driving that increase is supply chain attacks.

Alex: This is directly relevant to any CISO with European operations, European subsidiaries, or European third-party suppliers. And given how interconnected global supply chains are, that's most of you. The 50 percent increase isn't evenly distributed—it's concentrated in manufacturing, healthcare, and critical infrastructure. And the supply chain vector means your third-party risk management program is your front line.

Jordan: What's driving the shift is partly opportunity and partly regulatory asymmetry. European organizations are implementing NIS2, which creates mandatory incident reporting timelines. Ransomware operators know this. They know that a ticking disclosure clock creates leverage. If you have to report within 24 hours and you haven't figured out what happened yet, the pressure to pay increases.

Alex: And NIS2's supply chain provisions mean that if your supplier gets hit, you may have reporting obligations even if your own systems are untouched. CISOs need to be mapping their European supplier exposure and ensuring their third-party risk programs account for this threat concentration.

Jordan: Now let's talk about a vulnerability that demands immediate attention. CVE-2026-20245, Cisco Catalyst SD-WAN. CVSS 7.8. Mandiant confirmed this was exploited as a zero-day at least two months before public disclosure. The target was a communications service provider. The attackers gained root access and created rogue root accounts on SD-WAN infrastructure.

Alex: Let me be direct. If you're running Cisco Catalyst SD-WAN, this is a patch-now situation. The fact that it was exploited against a communications service provider—where SD-WAN infrastructure handles traffic routing—suggests the objective was traffic interception. Mandiant hasn't publicly attributed it, but the targeting profile and sophistication point to nation-state-adjacent actors.

Jordan: The exploitation requires authenticated local access, which means there's a precursor access event. So your threat hunting shouldn't stop at patching. You need to look for unauthorized accounts, unexpected privilege escalations, and any signs of lateral movement toward your SD-WAN management plane over the past 60 to 90 days.

Alex: Next up, and this one is genuinely novel. A macOS malware called Gaslight—Rust-based infostealer—that embeds prompt injection payloads specifically designed to make AI analysis tools refuse to examine it. This is not a proof of concept. Mandiant assesses with high confidence this is operational malware.

Jordan: This is the adversarial AI story that actually matters. Not AI generating malware—we've been talking about that for two years. This is malware that attacks the AI tools your SOC analysts are using. If your incident response workflow includes AI-assisted triage, AI-assisted malware analysis, AI-assisted reverse engineering, Gaslight is designed to make those tools say "I can't analyze this" or produce incorrect results. It's poisoning your analysis pipeline.

Alex: The strategic implication for CISOs is clear. If you've integrated AI tooling into your security operations—and most of you have or are in the process—you need adversarial testing of those tools. Can your AI analysis pipeline be tricked by embedded prompt injection? If you don't know the answer, you have a gap. AI in the SOC is a force multiplier, but it's also a new attack surface.

Jordan: And relatedly, the AI supply chain story. Five malicious packages were removed from OpenClaw's ClawHub skills marketplace after bypassing security verification. These packages contained infostealers. This is the npm and PyPI problem replicated in the AI agent ecosystem. If your organization is deploying AI agents that pull skills or plugins from marketplaces, you now have a software composition analysis problem that most AppSec programs aren't covering.

Alex: Extend your SCA tooling and your procurement review processes to AI skill and plugin ecosystems. If your AI agents can install capabilities from a marketplace, that marketplace is part of your supply chain. Treat it accordingly.

Jordan: Quick hit on Bajaj Auto. One of India's largest automotive manufacturers disclosed a ransomware incident via regulatory filing. No group has claimed it yet. The significance here isn't the specific incident—it's the pattern. Major industrial conglomerates in emerging markets are increasingly targets, and the disclosure came through securities regulation, not voluntary disclosure. SEBI's requirements forced transparency. Same dynamic we see with the SEC rules here.

Alex: And the White House state infrastructure cybersecurity initiative has stalled. The ONCD-led program to help states implement cybersecurity defenses for critical infrastructure hasn't progressed to actionable pilots. Most states are still waiting to participate. If you're a CISO in a regulated critical infrastructure sector, do not plan around federal-state coordination support materializing in the near term. Build your resilience independently.

Jordan: Last item. The Cordyceps vulnerability class. Novee Security identified a pattern in GitHub Actions CI/CD workflows that affects over 300 repositories across Microsoft, Google, Apache, and other major organizations. Exploitation allows full attacker control of repositories and silent backdooring of build artifacts.

Alex: If you're running GitHub-based CI/CD pipelines with pull request triggers on public repositories, audit immediately. This is a software supply chain risk that could allow an attacker to inject code into your build process without touching your source code directly. The Cordyceps pattern is a workflow configuration weakness, not a GitHub platform vulnerability, which means it's on you to fix.

Jordan: So stepping back—what's the theme this week?

Alex: It's the weaponization of trust in systems. The AI tools you trust for analysis can be manipulated. The AI marketplaces you trust for capabilities can deliver malware. The CI/CD pipelines you trust to build your software can be hijacked. The supply chains you trust in Europe are being targeted at 50 percent higher rates. Every layer of trust in the technology stack is being tested.

Jordan: And the response from the defender ecosystem is evolving. The dual-tool takedown, the Five Eyes acknowledging AI proliferation, these are signs that the strategic framework is shifting from prevention to continuous disruption. CISOs need to internalize that. You're not building a wall. You're managing an ongoing contest.

Alex: Exactly right. That's our show for Thursday, June 25th. Show notes and links to every story we covered are at cleartext.fm. We'll be back tomorrow.

Jordan: Stay sharp.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-25.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 6 topic areas, including: Five Eyes agencies sound alarm about AI’s threat to cybersecurity; Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage; Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents.

The Record (Recorded Future) · Jun 23 · Relevance: ██████████ 10/10

Why it matters to CISOs: A rare joint advisory from all Five Eyes intelligence agencies declaring that frontier AI will transform offensive cyber operations within months—not years—demands immediate strategic reassessment of defensive posture and AI governance. This is a direct call to action for security leaders to brief boards and accelerate resilience investments.

📖 Read full article

Infosecurity Magazine · Jun 24 · Relevance: ████████░░ 8/10

Why it matters to CISOs: MuddyWater's tactic of disguising state-sponsored espionage operations as ransomware attacks using commercially available malware directly complicates enterprise incident response and attribution, meaning organizations may misclassify a nation-state intrusion as a criminal event and respond inadequately.

📖 Read full article

The Hacker News · Jun 23 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A security firm demonstrated that a malicious AI agent skill can bypass all major skill marketplace security scanners and propagate to 26,000 agents including corporate accounts—exposing a critical governance gap in enterprise agentic AI deployments that current security tooling cannot yet detect or prevent.

📖 Read full article

Dark Reading · Jun 23 · Relevance: █████████░ 9/10

Why it matters to CISOs: The Klue supply chain attack exploiting OAuth tokens to access downstream customers' Salesforce environments—affecting LastPass and numerous other enterprise firms—is a critical reminder that third-party SaaS integrations represent an undermonitored attack vector with wide blast radius. CISOs should urgently audit OAuth token inventories and third-party Salesforce integration permissions.

📖 Read full article

The Hacker News · Jun 23 · Relevance: █████████░ 9/10

Why it matters to CISOs: The executive order establishes hard federal deadlines—key establishment by end of 2030, digital signatures by end of 2031—that will cascade into contractor and vendor compliance requirements, making PQC migration planning an urgent board-level obligation for any enterprise with federal contracts or regulated data.

📖 Read full article

Krebs on Security · Jun 23 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The day-one guilty pleas from Scattered Spider members in the UK signal growing international law enforcement effectiveness against sophisticated social engineering threat groups, and affirm that the group's attack patterns—which devastated MGM, Caesars, and Transport for London—carry serious criminal consequences that boards and insurers will note.

📖 Read full article

BankInfoSecurity · Jun 24 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Potential acquisition of Varonis—a major data security and access governance platform used widely in enterprises—by Blackstone, Thoma Bravo, or Vista Equity could signal product roadmap shifts, pricing changes, and integration strategy pivots that CISOs currently dependent on the platform should monitor closely.

📖 Read full article

The Hacker News · Jun 24 · Relevance: █████████░ 9/10

Why it matters to CISOs: CVE-2026-20230 is being actively exploited at scale via automated Tor-based sweeps dropping webshells on Cisco Unified Communications Manager—a widely deployed enterprise telephony platform—enabling unauthenticated remote code execution. Organizations running Unified CM must treat this as an emergency patch and isolate exposed systems immediately.

📖 Read full article

Dark Reading · Jun 23 · Relevance: █████████░ 9/10

Why it matters to CISOs: The FortiBleed campaign has evolved beyond initial exploitation: attackers deployed a custom Golang sniffer on compromised FortiGate firewalls to harvest credentials at massive scale, representing an active, ongoing threat to the 430,000 affected devices. CISOs with FortiGate infrastructure must assume credential compromise and force broad password resets across systems exposed to those firewalls.

📖 Read full article

Alex: Good morning. It's Wednesday, June 24th, 2026. This is Cleartext. I'm Alex Chen.

Jordan: And I'm Jordan Reeves.

Alex: We have a packed show today. The Five Eyes alliance just dropped a joint advisory that should be on every CISO's desk by lunch. We'll unpack the Salesforce supply chain attack that's still expanding, talk about why MuddyWater is dressing up as a ransomware gang, and cover a post-quantum crypto deadline that just got very real. Plus active exploitation of Cisco Unified CM, the FortiBleed campaign getting worse, Scattered Spider guilty pleas, a fake AI agent skill that fooled every scanner on the market, and Varonis potentially going private. Let's get into it.

Jordan: So let's start where we have to start. Yesterday, all five Five Eyes agencies — that's the US, UK, Canada, Australia, and New Zealand — issued a joint advisory on AI and offensive cyber. And the language is unusually blunt. The quote that matters is this: "The timeline is not years, it is months." They're saying frontier AI models are on the verge of surpassing current offensive cyber capabilities and that organizations need to treat this as an imminent shift, not a theoretical one.

Alex: I want to sit with the weight of that for a second. Joint advisories from all five nations are rare. They don't do this for incremental threats. The last time we saw language this urgent across all five was the early warnings about Chinese pre-positioning in critical infrastructure. So when they say months, they mean it. And the audience they're addressing isn't just government agencies — they're explicitly pressing business leaders to treat cyber resilience as a core business risk, which tells you they see private sector readiness as dangerously behind.

Jordan: What's changed is the capability curve. We've been watching AI-augmented offensive tools improve steadily — better phishing, faster vulnerability discovery, automated exploit generation. But the advisory implies something qualitative is about to shift. We're moving from AI as a force multiplier for existing tradecraft to AI as an autonomous offensive capability that changes the economics of attack entirely.

Alex: And for CISOs, this is a board conversation today. Not next quarter. If you're building your fiscal year 2027 budget without factoring in a step-function increase in attacker capability, you're building the wrong budget. This advisory gives you the ammunition to go to your board and say, every major Western intelligence agency is telling us to move now. Use it.

Jordan: And while we're on geopolitics, let's talk about MuddyWater, because this story connects directly. NCC Group published research showing Iran's MuddyWater group is now disguising state-sponsored espionage operations as ransomware attacks. They're deploying commercially available malware, using ransomware personas, specifically to mislead defenders and incident responders.

Alex: This is an attribution problem that creates a response problem. If your IR team classifies an intrusion as criminal ransomware, the playbook is containment, recovery, maybe negotiate, move on. But if it's actually a nation-state intelligence operation, you're dealing with persistent access, data exfiltration objectives, potential re-entry. The remediation scope is completely different. You might think you're clean when you're not even close.

Jordan: Right. And the commercial tooling choice is deliberate. When MuddyWater uses the same off-the-shelf malware that every ransomware affiliate uses, your EDR alerts, your threat intel feeds — they're going to match criminal TTPs, not nation-state signatures. The entire detection and attribution chain gets poisoned. My advice: if you're in a sector Iran cares about — energy, defense, government contractors, Middle East-adjacent businesses — treat every ransomware incident as potentially state-sponsored until you can prove otherwise. That changes your escalation procedures and your forensic depth.

Alex: Now let's shift to what I think is the operational story of the week. The Salesforce supply chain attack through Klue continues to expand. Dark Reading is reporting more victims emerging. Here's the chain: attackers breached Klue, a competitive intelligence platform, and used Klue's OAuth tokens to access downstream customers' Salesforce environments. LastPass has confirmed that customer support case data was stolen through this exact path. And here's the detail that should make every CISO wince — the attackers reportedly used a credential from 2022 that was never revoked after a pilot program ended.

Jordan: A four-year-old credential from a pilot. That's the kind of thing that kills you. And it's not exotic. Every enterprise has these. OAuth tokens granted to vendors during evaluations, pilots, proofs of concept — and nobody goes back to clean them up. This is a governance failure, not a technology failure.

Alex: Absolutely. And the blast radius here illustrates why SaaS-to-SaaS integrations are one of the most undermonitored attack surfaces in enterprise security. Your Salesforce instance might have dozens of third-party OAuth connections, each one a potential lateral path. If you don't have an inventory of every OAuth token and every third-party integration touching your SaaS platforms, you need one this week. Revoke anything that's not actively in use. And for the love of all things sacred, build a deprovisioning workflow for pilots and POCs that actually gets executed.

Jordan: The Klue-to-Salesforce chain is a template. Expect more of this. SaaS supply chain attacks are the new software supply chain attacks.

Alex: Pivoting to governance. President Trump signed Executive Order 14409 on Sunday, setting hard deadlines for federal post-quantum cryptography migration. Key establishment systems must migrate by December 31, 2030. Digital signatures by December 31, 2031. National security systems are on a separate track.

Jordan: Those dates sound far away. They are not far away. If you've ever done a cryptographic migration across a large enterprise, you know this is a multi-year program. Discovery alone — finding every system, every certificate, every key exchange — takes months. And for anyone with federal contracts, this isn't optional. These deadlines will cascade into contractor and vendor requirements just like every other federal mandate does.

Alex: This is the conversation I've been having with boards for two years. Harvest-now-decrypt-later is not a hypothetical threat. Adversaries are collecting encrypted data today with the expectation that quantum decryption will unlock it within this decade. The executive order confirms the US government believes that timeline is credible enough to mandate action. If you're in financial services, healthcare, defense contracting, or any regulated sector, your PQC migration roadmap should be a board-level agenda item. Start with a crypto inventory. You can't migrate what you can't find.

Jordan: Let's hit the vulnerability block. Two active exploitation stories that need your attention. First, CVE-2026-20230 in Cisco Unified Communications Manager. CVSS 8.6. It's an SSRF and input validation flaw that gives unauthenticated remote code execution. Honeypots are already detecting automated sweeps through Tor dropping webshells via a WebDialer SSRF exploit chain. This is not theoretical — it's happening now, at scale.

Alex: If you're running Unified CM or Unified CM SME, this is an emergency patch. If you can't patch immediately, isolate those systems from internet-facing exposure now. Verify that your WebDialer interface is not accessible externally. Check for webshells. This is the kind of vulnerability that gives attackers a foothold deep inside your communications infrastructure.

Jordan: Second, FortiBleed. We covered the initial FortiGate compromise wave, but the campaign has evolved significantly. Attackers deployed a custom Golang-based network sniffer on approximately 430,000 compromised FortiGate firewalls, and they've harvested roughly 110 million credentials from victim networks. This is ongoing.

Alex: Let me say that number again. 110 million credentials. If your organization runs FortiGate firewalls and you haven't already assumed credential compromise, you need to do that now. Force password resets across every system that was behind or transited through those firewalls. Review authentication logs for anomalous access patterns. And coordinate with Fortinet on the latest IOCs and remediation guidance.

Jordan: Moving quickly — Scattered Spider. Two members pleaded guilty on day one of what was expected to be a six-week trial in the UK. Charges relate to the August 2024 attack that crippled Transport for London. This is the group behind MGM, Caesars, and a long list of corporate breaches using social engineering.

Alex: The day-one guilty pleas signal the strength of the evidence and the increasing effectiveness of international law enforcement cooperation. For CISOs, two takeaways. One, your board and your insurers are watching these cases. The attack patterns Scattered Spider used — help desk social engineering, SIM swapping, MFA fatigue — are well documented. If you haven't hardened against them, you're accepting known risk. Two, law enforcement is getting better at this. Attribution has consequences now. That changes the calculus for some threat actors, though certainly not all.

Jordan: Quick hit on the AI agent supply chain story. AIR Security built a fake AI agent skill, pushed it through a popular skill marketplace, advertised it on Instagram, and it reached roughly 26,000 agents, including corporate accounts. Every skill security scanner they tested it against marked it safe.

Alex: This is the agentic AI governance gap in action. Enterprises are deploying AI agents, connecting them to skill marketplaces, and the security tooling simply doesn't exist yet to vet what those skills actually do. The payload here was benign by design — just collected email addresses — but the proof of concept is devastating. If a malicious skill can reach 26,000 agents including corporate ones without triggering a single alert, your agentic AI deployment is an unmonitored attack surface. If you're running enterprise agents, you need a governance framework for skill approval that doesn't rely on marketplace scanners alone.

Jordan: Last story. Varonis is reportedly exploring a sale. Blackstone, Thoma Bravo, and Vista Equity have expressed preliminary interest. This follows stock struggles and unfavorable market comparisons to Cyera.

Alex: If you're a Varonis customer, put this on your watch list. Private equity acquisitions of security vendors historically lead to cost optimization, which can mean changes to product roadmaps, support models, and pricing. No action required today, but start evaluating your dependency and optionality.

Jordan: Alright, zooming out. Alex, what's the thread this week?

Alex: The thread is convergence. AI accelerating offensive capabilities, state actors hiding behind criminal tradecraft, supply chains being exploited through forgotten OAuth tokens and unvetted AI skills. Every one of these stories points to the same conclusion: the attack surface is expanding faster than our ability to monitor it, and the sophistication gap between offense and defense is widening. The Five Eyes advisory isn't just about AI — it's a signal that the entire threat landscape is about to shift. CISOs who are still running 2024 playbooks are going to get caught flat-footed.

Jordan: Agreed. And the common operational failure across half these stories is the same: things we granted access to and forgot about. OAuth tokens from 2022. FortiGate firewalls that weren't patched. AI skills that weren't vetted. The boring hygiene work is still the most consequential work. The difference now is that the adversaries exploiting those gaps are faster, smarter, and increasingly AI-augmented.

Alex: Well said. If you take one thing from today's show, make it this: go audit your third-party integrations and revoke what you don't need. It's the highest-ROI security action you can take this week.

Jordan: That's the show for today.

Alex: Show notes and links to every story we covered are at cleartext.fm. We're back tomorrow. Stay sharp.

Jordan: Thanks for listening.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-24.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 5 topic areas, including: Intel agencies: Frontier AI models will reshape cybersecurity faster than expected; Microsoft Attributes Mastra AI Supply Chain Attack to North Korea; Suspected cyberattack triggers false emergency alerts across parts of Brazil.

CyberScoop · Jun 22 · Relevance: █████████░ 9/10

Why it matters to CISOs: A Five Eyes joint warning signals that AI-enabled offensive capabilities are arriving on a compressed timeline, requiring CISOs to accelerate defensive AI investments and threat model updates now rather than in multi-year planning cycles.

📖 Read full article

Infosecurity Magazine · Jun 22 · Relevance: █████████░ 9/10

Why it matters to CISOs: North Korean state actor Sapphire Sleet targeting a widely-used AI framework signals that AI development toolchains are now high-priority nation-state targets, forcing CISOs to extend supply chain security controls to AI/ML infrastructure.

📖 Read full article

The Record (Recorded Future) · Jun 22 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The compromise of Brazil's national emergency alert infrastructure to broadcast false warnings demonstrates that critical public-warning systems are viable targets for disruption operations, a template CISOs supporting government or critical infrastructure clients must account for.

📖 Read full article

BankInfoSecurity · Jun 22 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: U.S. government restrictions on Anthropic's most advanced models directly affect enterprise security teams evaluating or deploying frontier AI for defensive use cases, forcing strategic reconsideration of AI vendor selection and deployment architectures.

📖 Read full article

BankInfoSecurity · Jun 22 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: New CISO research quantifying organizations' inability to track AI agent data access confirms that identity and access management frameworks designed for human actors create dangerous blind spots when AI agents inherit enterprise permissions at machine speed.

📖 Read full article

TechCrunch Security · Jun 22 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A breach at market research platform Klue propagated through OAuth/Salesforce integrations to compromise data at multiple major security vendors, illustrating how SaaS supply chain trust relationships create systemic third-party risk even within the security industry itself.

📖 Read full article

Infosecurity Magazine · Jun 22 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The Gentlemen ransomware gang distributing a purpose-built EDR-killer framework to affiliates as a service raises the baseline capability of ransomware operators and directly challenges EDR as a last line of defense in enterprise environments.

📖 Read full article

The Hacker News · Jun 22 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Canada's CSIS obtaining judicial authority to remotely remediate privately-owned infected devices sets a legal precedent for government-mandated active cyber defense on enterprise infrastructure, with significant implications for corporate network sovereignty and incident response obligations.

📖 Read full article

Cybersecurity Dive · Jun 22 · Relevance: █████████░ 9/10

Why it matters to CISOs: A months-long campaign (FortiBleed) actively harvesting Fortinet credentials at scale across western enterprises requires immediate verification of device hardening posture and credential rotation for any internet-facing Fortinet infrastructure.

📖 Read full article

Jordan: Five Eyes just told every CISO on the planet that AI-enabled offensive capabilities aren't a planning-cycle problem — they're a this-quarter problem. Meanwhile, North Korea is poisoning AI development frameworks, Brazil's emergency alert system got hijacked, and a breach at a market research platform cascaded through OAuth tokens into Huntress, HackerOne, Recorded Future, and half a dozen other security vendors. It's Monday, June 22nd. Let's get into it.

Alex: Welcome to Cleartext. I'm Alex Chen, alongside Jordan Reeves. We've got a dense show today. We're going to spend real time on that Five Eyes warning because it changes planning assumptions. We'll connect it to the Anthropic export restrictions and the AI permissions blind spot that's widening across enterprises. Then we'll hit the North Korea supply chain attack on Mastra, the Klue breach that embarrassed our own industry, a new EDR-killer framework going affiliate, a Canadian legal precedent for government-mandated remediation on private infrastructure, and a Fortinet credential harvesting campaign that CISA wants you acting on right now. Jordan, take us into the Five Eyes piece.

Jordan: So all five agencies — NSA, GCHQ, CSE, ASD, GCSB — put their names on a joint assessment that frontier AI models capable of meaningfully augmenting offensive cyber operations are months away, not years. That's the headline. But the real story is the subtext. Intelligence agencies issue joint warnings when they want to create political cover for accelerated spending and policy. This is a signal to governments and to the private sector that the threat model is compressing.

Alex: And the timing matters. This validates what researchers at Anthropic, DeepMind, and several academic labs have been publishing over the last twelve months. But there's a difference between a research paper and a Five Eyes joint advisory. The advisory is what your board will read. It's what your general counsel will forward you. If you haven't updated your threat models to account for AI-augmented reconnaissance, AI-generated exploit chains, and AI-assisted social engineering operating at scale, you're behind. Not behind the curve — behind the threat.

Jordan: I want to be specific about what "months away" means operationally. We're not talking about AGI writing zero-days from scratch. We're talking about models that can take a known vulnerability, generate working exploit code, adapt it to a target environment, and do that across thousands of targets simultaneously. The economics of offense just changed. The marginal cost of a sophisticated attack drops toward zero.

Alex: Which brings us directly to the Anthropic restriction story. The U.S. government has imposed export-style restrictions on Anthropic's most advanced models. The cybersecurity industry is pushing back hard, and the argument is straightforward — you're handicapping defenders while attackers have no such constraints. Adversaries aren't waiting for an export license.

Jordan: The policy tension here is real. There are legitimate national security reasons to control frontier model proliferation. But the practical effect for CISOs is that your AI vendor strategy just got geopolitical risk layered on top of it. If you've been building defensive workflows around a specific frontier model — automated threat hunting, code review, incident response augmentation — you need to scenario-plan for access disruption. What happens if the model you depend on gets restricted, versioned down, or pulled from your region?

Alex: This is a procurement and architecture conversation now, not just a policy debate. Dual-vendor strategies for AI, just like you'd have for cloud. And it connects to the smaller models discussion that's gaining traction. There are CISOs making the argument that fine-tuned, domain-specific smaller models running on-premise give you capability without the geopolitical supply chain risk.

Jordan: Agreed. And while we're on AI risk — the BankInfoSecurity piece on AI agent permissions is one of those stories that sounds academic until you realize it describes your environment right now. The research shows that most organizations cannot track what data their AI agents are accessing. The agents inherit user permissions. They operate at machine speed. They don't hesitate, they don't apply judgment, they don't think "maybe I shouldn't open that file." Your IAM framework was designed for humans. It assumes a human is on the other end of that session.

Alex: This is the identity governance gap I've been talking about for six months. Every CISO I know has deployed or is deploying AI agents somewhere in their environment. How many of them have implemented agent-specific access controls? How many can audit what those agents touched last Tuesday? The answer, based on this research, is almost none. You need a dedicated workstream for AI agent identity governance. Treat agents as a distinct principal type. Instrument them. Constrain them. Audit them. If you can't do that today, you need to be honest with your board about what you don't know.

Jordan: Let's pivot to the North Korea story because it puts a point on all of this. Microsoft attributed a supply chain attack on the Mastra AI framework to Sapphire Sleet. For anyone unfamiliar, Mastra is an open-source AI agent framework that a lot of development teams use to build AI-powered applications. Sapphire Sleet compromised the supply chain — meaning anyone pulling Mastra dependencies could have been pulling poisoned code.

Alex: This is the convergence story. Nation-states are now targeting AI development toolchains specifically. Not just traditional software supply chains — AI supply chains. The libraries, the frameworks, the model registries, the training pipelines. If your engineering teams are building AI capabilities, which they are, their development dependencies are now a tier-one attack surface.

Jordan: And Sapphire Sleet is not a smash-and-grab crew. They do financial theft and espionage. They're strategic. Compromising an AI framework gives you access to every organization that uses it. It's a force multiplier. CISOs need to be having explicit conversations with their engineering leadership about AI dependency management. Software composition analysis tools need to cover AI-specific supply chains. If they don't today, that's a gap.

Alex: Moving to the Klue breach, and this one stings because it hit our own industry. Huntress, HackerOne, Jamf, Recorded Future, Tanium — these are security companies. Klue is a competitive intelligence platform. The attackers compromised Klue, obtained OAuth tokens through a Salesforce integration, and used those tokens to pivot into downstream customer environments.

Jordan: OAuth token abuse through SaaS integrations. It's not new, but the scale and the victim list here make it a case study. Every one of those security vendors had a trust relationship with Klue. That trust relationship was a lateral movement path. The attackers didn't need to breach Huntress directly. They breezed through the integration.

Alex: The lesson for every CISO: your SaaS integration map is your blast radius map. When did you last audit every OAuth grant, every API token, every third-party integration touching your Salesforce instance, your identity provider, your CRM? Most organizations can't even enumerate them. That's the problem. You can't revoke what you can't see.

Jordan: Let's talk about the GentleKiller framework. ESET published details on a purpose-built EDR-killing tool distributed by the Gentlemen ransomware gang to their affiliates as a service. This is EDR bypass as a commodity.

Alex: This is the natural evolution. We've seen EDR killers before — Terminator, AuKill, various BYOVD techniques. The difference here is the productization. It's packaged, maintained, and distributed to affiliates who may not have the sophistication to build it themselves. It raises the floor for every ransomware operator in that ecosystem.

Jordan: If your defensive strategy terminates at the EDR agent, you have a single point of failure that now has a purpose-built tool designed to remove it. Defense in depth isn't a platitude here — it's operational necessity. Application allowlisting, network segmentation, behavioral analytics that don't depend on the endpoint agent being alive.

Alex: The Brazil emergency alert story is worth flagging because it's a template. Attackers compromised the national Civil Defense Alert system and pushed at least a dozen false emergency warnings to citizens. Floods, landslides — the kind of alerts people act on immediately.

Jordan: This is a trust destruction operation. The damage isn't in the false alerts themselves — it's that next time there's a real flood warning, people hesitate. If you're a CISO supporting government infrastructure, critical infrastructure, or any organization that operates public-facing alert or notification systems, this is your threat scenario. Authenticate your broadcast channels. Verify the integrity of your alerting pipeline end to end.

Alex: The Canada story is a legal precedent worth tracking. CSIS — Canada's intelligence service — obtained a judicial warrant to remotely access and remediate privately owned devices that were part of foreign-run botnets. Home routers, IoT devices, servers — on Canadian soil, belonging to private parties.

Jordan: First time they've used threat reduction warrant powers this way. The ruling was made public June 15th. This matters because it establishes that a government intelligence agency can, with judicial authorization, reach into your infrastructure and alter it to neutralize a threat. Whether you view that as a necessary national defense measure or a sovereignty concern depends on your perspective. But CISOs need to understand the legal landscape is shifting. Governments are asserting authority to act on private networks.

Alex: If your devices are compromised and you haven't remediated them, someone else might. That's the new reality.

Jordan: Last item — CISA issued an urgent advisory on Fortinet credential compromise. The FortiBleed campaign has been running for months, targeting western organizations. Thousands of credentials confirmed compromised. This is active, ongoing exploitation.

Alex: If you have internet-facing Fortinet infrastructure, this is a stop-what-you're-doing item. Verify device hardening against CISA's advisory. Rotate credentials. Check for indicators of compromise. Assume breach if you haven't patched and hardened. This isn't theoretical — thousands of organizations are already compromised.

Jordan: The theme this week, Alex — it's compression. Time compression on AI threats. Trust compression across SaaS supply chains. Capability compression as commodity tools close the gap between sophisticated and unsophisticated attackers.

Alex: That's exactly right. The planning assumptions from twelve months ago are obsolete. The Five Eyes warning isn't about 2028. The Mastra supply chain attack isn't about future AI risks. The GentleKiller framework isn't about theoretical EDR bypass. All of it is happening now, and the organizations that are still in annual planning cycles for these threats are operating on a timeline that no longer exists.

Jordan: Watch this week for follow-on analysis from the Five Eyes advisory — particularly any technical annexes that drop. Watch for Klue breach notifications propagating through vendor risk management channels. And if you're running Fortinet, you know what to do.

Alex: That's our show for Monday, June 22nd. Show notes, links to every story we covered, and additional context are at cleartext.fm. I'm Alex Chen.

Jordan: I'm Jordan Reeves. See you tomorrow.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-22.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 17 stories across 5 topic areas, including: Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails; Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns; Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites.

The Hacker News · Jun 15 · Relevance: █████████░ 9/10

Why it matters to CISOs: UNC6508 spent over a year undetected inside North American medical, academic, and defense research networks by weaponizing the victims' own Google Workspace mail-forwarding rules — a living-off-the-land technique that bypasses most SIEM detection. Any organization running REDCap or sharing research data with defense agencies should treat this as a direct threat model.

📖 Read full article

The Record (Recorded Future) · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: NCSC CEO Richard Horne's explicit warning that nation-states are pre-positioning inside critical infrastructure for future kinetic conflict is a board-level strategic signal, not just a tactical advisory. CISOs in energy, water, transport, and defense supply chains should use this framing to elevate resilience investment conversations.

📖 Read full article

The Hacker News · Jun 19 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The takedown of Evil Corp's SocGholish infrastructure — 106 servers and nearly 15,000 compromised WordPress sites — is a significant disruption to a major initial-access broker used by ransomware affiliates. CISOs should use this moment to audit web supplier estates and verify no SocGholish indicators persist in their environments.

📖 Read full article

Cybersecurity Dive · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Iran-linked group Handala claiming an attack on one of the largest U.S. water utilities underscores the active targeting of civilian critical infrastructure by state-sponsored actors — a risk CISOs at utilities and their OT/ICS vendors must plan for explicitly in incident response tabletops.

📖 Read full article

The Hacker News · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: The Klue incident is the third Salesforce-connected app compromised this year via OAuth token abuse, demonstrating that third-party SaaS integrations are now a primary attack vector against CRM data. CISOs should audit every OAuth app connected to Salesforce and other critical platforms immediately.

📖 Read full article

BleepingComputer · Jun 19 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A breach at a third-party license vendor exposing 3 million government-issued IDs — including passports — illustrates the persistent risk of state and local government's dependence on under-secured SaaS vendors for identity-critical data. CISOs supporting government contracts or housing similar identity data should review vendor risk posture.

📖 Read full article

Dark Reading · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Novo Nordisk's breach via a leaked GitHub token reframes secrets management from a developer tooling issue into an identity governance problem that belongs in the CISO's purview. With supply-chain attacks accelerating — including the Mastra npm compromise and TeamPCP campaigns this week — secure-by-design CI/CD pipelines are now a board-reportable risk.

📖 Read full article

Wired Security · Jun 16 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The U.S. government's export controls on Anthropic's Fable 5 and Mythos 5 — opposed by dozens of CISOs in an open letter — raises a foundational strategic question: whether restricting defensive AI tools slows defenders more than attackers. Security leaders need a position on this for both vendor and regulatory engagement.

📖 Read full article

Dark Reading · Jun 16 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The organized pushback from the security community — including an open letter from senior practitioners — signals that AI export controls are becoming a significant policy battleground that will shape which defensive tools CISOs can deploy for global teams. This is a regulatory risk to track for multinational security programs.

📖 Read full article

BankInfoSecurity · Jun 20 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: New CISO research confirming that most enterprises cannot track what AI agents are accessing — despite those agents operating with full user-level permissions — is an identity governance gap that existing IAM and PAM programs were not designed to close. This is the foundational control problem underlying the AutoJack and SearchLeak disclosures this week.

📖 Read full article

Dark Reading · Jun 15 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: With SEC disclosure rules now in force and DOJ prosecuting CISOs for concealment, the finding that most CISOs feel organizational pressure to suppress bad security news is a direct personal and legal liability signal. CISOs need explicit board-level mandates protecting their ability to disclose accurately and on time.

📖 Read full article

Help Net Security · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: This is the largest OT/ICS security acquisition in the industry's history; it consolidates three complementary asset-visibility and threat-detection platforms under a global consulting giant at a moment when critical infrastructure attacks are surging. CISOs at industrial organizations should expect significant product roadmap and support changes at Dragos, runZero, and NetRise.

📖 Read full article

CyberScoop · Jun 18 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Accenture's simultaneous acquisition of Dragos, runZero, and NetRise consolidates the leading OT asset discovery, firmware analysis, and threat detection platforms into a single managed-services wrapper — a move that could reshape how enterprise CISOs procure and operate OT security programs.

📖 Read full article

The Hacker News · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: Russian-speaking threat actors have compromised nearly 87,000 FortiGate devices in an active campaign dubbed FortiBleed; any enterprise running Fortinet perimeter gear must treat this as an emergency patching and credential-reset event. CISA's formal warning combined with active FortiSandbox exploitation this same week signals a coordinated targeting of Fortinet's entire product line.

📖 Read full article

Help Net Security · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: Splunk is a crown-jewel security operations platform; unauthenticated RCE in it means attackers can potentially pivot from the SIEM into every integrated environment. CISA's order to patch by June 21 leaves federal CISOs almost no runway and sets the urgency bar for enterprise security teams.

📖 Read full article

The Hacker News · Jun 15 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The SearchLeak exploit chain demonstrates that enterprise AI assistants like Copilot introduce novel exfiltration paths that bypass traditional email security and URL filtering — CISOs running M365 Copilot Enterprise Search must validate that Varonis's disclosed CVEs are fully patched and review Copilot's data access scope.

📖 Read full article

The Hacker News · Jun 19 · Relevance: ████████░░ 8/10

Why it matters to CISOs: AutoJack is the first publicly documented exploit chain turning an AI browsing agent into a remote code execution vector via a malicious web page — with no credentials or user interaction required after initial page load. CISOs deploying agentic AI for business process automation must treat agent sandboxing and privilege isolation as a critical control.

📖 Read full article

Alex: Welcome back to Cleartext. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. This is your Saturday Week in Review for the week ending June 20th, 2026.

Jordan: If I had to distill this entire week into a single sentence, it would be this: the things you trust most are the things being used against you. Your Google Workspace rules, your Salesforce OAuth tokens, your Splunk SIEM, your AI copilot, your Fortinet perimeter. Every one of those became an attack surface this week. Not because they're broken, but because adversaries have figured out that living inside your trusted infrastructure is more effective than trying to break through it.

Alex: That's exactly the thread. So if you couldn't keep up this week, here's what mattered and what it means. We're going to cover four themes. First, the nation-state infrastructure story, which is no longer theoretical. Second, the trust chain collapse, where your own tools and integrations became the attack path. Third, AI as both a weapon and a policy battleground. And fourth, a massive acquisition that's going to reshape OT security procurement for years. Let's get into it.

Jordan: So let's start with the geopolitical picture because this was a week where three distinct stories painted a very coherent, very uncomfortable picture. Google's Threat Intelligence Group disclosed that a China-linked group, UNC6508, had been sitting inside North American medical, academic, and defense research networks since 2023. Over a year undetected. And the tradecraft here is what matters. They got in through backdoored REDCap servers, which is a research data platform that's everywhere in clinical and academic environments. But the exfiltration method was almost elegant in its simplicity. They rewrote the victims' own Google Workspace mail forwarding rules to silently copy messages out.

Alex: And this is the part that should make every CISO uncomfortable. This isn't some exotic zero-day chain. This is a configuration change in a productivity suite that most security teams aren't monitoring with the granularity required to catch it. How many of your organizations are auditing Google Workspace mail routing rules as part of your threat detection program? I'd bet the number is vanishingly small. And if you're in a sector that touches defense research, clinical trials, anything with dual-use implications, this is your threat model right now.

Jordan: The same day that story was developing, NCSC CEO Richard Horne gave a speech at RUSI that was remarkably blunt for a sitting intelligence chief. He said, and I'm paraphrasing only slightly, that kinetic targeting in any future conflict will be based on intelligence gathered today, and that nation-state adversaries are actively prepositioning inside British critical infrastructure. Seventy-five percent of consequential attacks on UK critical infrastructure are now attributed to nation-states. Three-quarters.

Alex: And he wasn't being abstract. He was directly telling business leaders to fundamentally rethink how they protect critical infrastructure. This is the kind of language that should show up in your next board presentation verbatim. When the head of the UK's national cyber center is saying that adversaries are already inside positioning for future conflict, that reframes your resilience investment from cybersecurity spending to national security preparedness. Those are different budget conversations.

Jordan: And then to round out the picture, we had an Iran-linked group called Handala claiming a breach at a major California water utility. The utility confirmed it's investigating. This follows the pattern we've been tracking for two years now: Iranian actors targeting U.S. water and energy infrastructure. These aren't espionage operations. These are capability demonstrations. They're proving they can reach civilian infrastructure, and they want us to know it.

Alex: The bright spot in this theme was Operation Endgame. Dutch, Canadian, German, and U.S. law enforcement took down 106 servers tied to Evil Corp's SocGholish botnet and remediated nearly fifteen thousand compromised WordPress sites. SocGholish was a major initial access broker feeding ransomware affiliates, so this is meaningful disruption. But I want to be clear about what this is and isn't. This is a temporary setback for one operation. The infrastructure will reconstitute. The value here is the intelligence gathered and the signal it sends that law enforcement is willing to invest in sustained disruption campaigns.

Jordan: Agreed. And CISOs should use this moment practically. Audit your web supply chain for SocGholish indicators. Check your WordPress-based vendor estates. The fifteen thousand compromised sites that were cleaned up had been serving malicious redirects, and some of them were probably in your users' browsing paths.

Alex: Let's move to what I'm calling the trust chain collapse, because this was the week it became undeniable that third-party integrations and your own security tools are the primary attack surface. The Klue incident is Exhibit A. A threat actor group called Icarus stole OAuth tokens from Klue, a competitive intelligence platform, and used those tokens to access customer Salesforce environments. Salesforce killed the integration entirely. And here's the number that should alarm you: this is the third Salesforce-connected app compromised via OAuth token abuse this year. Third.

Jordan: The pattern is clear and it's not going away. Your Salesforce instance doesn't get breached directly. It gets breached through the twenty, thirty, fifty OAuth-connected apps that have persistent access to your CRM data. And most security teams have no inventory of those connections, let alone monitoring on what they're accessing. If you haven't done a full OAuth app audit on Salesforce, ServiceNow, and your other critical SaaS platforms, this is the week you start.

Alex: The Texas Parks and Wildlife breach follows the same pattern at the government level. Three million driver's licenses and passport records exposed, not through the state agency's own systems, but through a third-party licensing vendor. The vendor was the weak link. And this is the challenge for any CISO supporting government contracts or holding identity-critical data: your security posture is only as strong as your least mature vendor.

Jordan: And then Novo Nordisk got breached via a leaked GitHub token that gave attackers access to their development pipeline. Dark Reading's framing was exactly right: this is an identity governance problem, not a developer tooling problem. Secrets management has been treated as something the engineering team handles with their own tools, and it needs to be pulled into the CISO's identity governance program. The same week, we saw a hundred forty-five compromised Mastra npm packages. The supply chain is under coordinated pressure.

Alex: Now let's talk about the vulnerabilities that hit this week, because two of them are genuinely hair-on-fire. FortiBleed. Russian-speaking actors have compromised eighty-six thousand six hundred forty-four FortiGate devices in an active campaign. CISA issued an emergency advisory. And in the same week, three FortiSandbox CVEs came under active exploitation. This looks like coordinated targeting of Fortinet's entire product line. If you're running Fortinet on your perimeter, this is an emergency patching and credential reset event. Full stop.

Jordan: And then there's CVE-2026-20253. Unauthenticated remote code execution in Splunk Enterprise, confirmed exploited in the wild. I want to let that sink in. Splunk. Your SIEM. The thing that's supposed to be watching everything. It has an unauthenticated RCE that attackers are actively exploiting. CISA ordered federal agencies to patch by June 21st, which is tomorrow. That's almost no runway. If you're running Splunk Enterprise, assume you're in scope and act accordingly.

Alex: This connects directly to Jordan's opening point. When your security monitoring platform itself becomes the attack vector, the trust assumptions underlying your entire detection architecture need to be reexamined.

Jordan: Which brings us to AI, and this was a big week on multiple fronts. Let's start with the attacks. Microsoft researchers documented AutoJack, which is the first publicly documented exploit chain that turns an AI browsing agent into a remote code execution vector. A malicious web page's JavaScript hijacks the AI agent, reaches a privileged local service, and spawns a process on the host. No credentials required. No further user interaction after the page loads. If you're deploying agentic AI for business process automation, this is the attack you need to model against.

Alex: And Varonis disclosed SearchLeak, a one-click exfiltration chain against Microsoft 365 Copilot Enterprise Search. A victim clicks what looks like a legitimate microsoft.com URL, Copilot searches their mailbox, and data gets exfiltrated via a Bing server-side request forgery. Traditional anti-phishing tools couldn't catch it because the domain was legitimate. These two disclosures, combined with the BankInfoSecurity research showing most enterprises can't even track what their AI agents are accessing, paint a very clear picture: we are deploying AI with human-level permissions and zero human-level judgment, and our existing IAM and PAM controls were never designed for this.

Jordan: On the policy front, the Trump administration placed export controls on Anthropic's Claude Fable 5 and Mythos 5, which are cybersecurity-focused AI models. Dozens of CISOs and security researchers signed an open letter calling this dangerous to defenders. The argument is straightforward: offensive AI capabilities will proliferate regardless, and restricting the models that defenders use for vulnerability discovery and secure code review just creates asymmetry that favors attackers. If you run a multinational security program, this is a regulatory risk you need to be tracking because it will determine which AI tools your global teams can deploy.

Alex: And for the market-moving story of the week. Accenture announced a four-point-eighteen-billion-dollar deal to acquire a majority stake in Dragos and full ownership of runZero and NetRise. This is the largest OT security acquisition in the industry's history, and it's happening at exactly the moment when critical infrastructure attacks are surging. If you're a Dragos, runZero, or NetRise customer, expect product roadmap changes, support model changes, and likely a push toward Accenture's managed services wrapper. Start planning for that conversation now.

Jordan: The timing is not coincidental. Accenture is reading the same threat landscape we just walked through. Nation-states prepositioning in critical infrastructure, Iranian actors hitting water utilities, coordinated campaigns against network perimeter devices. OT security just became a four-billion-dollar bet by one of the world's largest consulting firms.

Alex: So stepping back, what defined this week? I think it's the collapse of implicit trust. Every story we covered, from Google Workspace forwarding rules to Salesforce OAuth tokens to Splunk and Fortinet to AI agents acting with user permissions, the common thread is that attackers are exploiting the trust we place in our own tools and integrations. The perimeter isn't just the firewall anymore. It's every API connection, every OAuth token, every AI agent, every configuration rule in every SaaS platform.

Jordan: And the uncomfortable corollary is that your detection architecture was built on the assumption that your own tools are trustworthy. When the SIEM has an unauthenticated RCE, when the AI copilot is an exfiltration path, when the firewall vendor's entire product line is under coordinated attack, you need to rethink what you're trusting and why. Going into next week, I'd prioritize three things: audit every OAuth integration on your critical SaaS platforms, verify your Fortinet and Splunk patching status as of today, and start the conversation with your board about what the NCSC's prepositioning warning means for your resilience investment.

Alex: Well said. The daily show returns Monday. All the stories we referenced today, with links and context, are at cleartext.fm. Thanks for spending part of your weekend with us.

Jordan: Stay sharp. See you Monday.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-20.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 5 topic areas, including: Authorities disrupt Evil Corp’s SocGholish botnet; DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic; INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023.

CyberScoop · Jun 18 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The multinational takedown of Evil Corp's SocGholish infrastructure—106 servers seized and 15,000 infected sites remediated—represents a significant disruption to a ransomware-delivery network that has been an initial access vector for major enterprise breaches; CISOs should use this moment to verify that their web proxies and endpoint controls would have blocked SocGholish drive-by downloads.

📖 Read full article

The Hacker News · Jun 18 · Relevance: ████████░░ 8/10

Why it matters to CISOs: DragonForce's technique of routing ransomware C2 traffic through legitimate Microsoft Teams relay infrastructure directly defeats network-based detection that relies on blocklists or anomaly thresholds against known-bad infrastructure—CISOs must validate whether their NDR and SIEM rules can detect behavioral anomalies in Teams traffic rather than relying on domain or IP reputation.

📖 Read full article

The Hacker News · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: INC ransomware has quietly absorbed affiliates displaced by the LockBit and BlackCat takedowns and now ranks among the most prolific RaaS operations—CISOs updating their threat models and cyber insurance submissions should incorporate INC's growing TTPs and sector targeting patterns.

📖 Read full article

BleepingComputer · Jun 18 · Relevance: █████████░ 9/10

Why it matters to CISOs: The Klue-Salesforce-Huntress breach chain is a textbook third-party OAuth integration attack that cascaded into CRM data theft across multiple enterprises—including a cybersecurity vendor—illustrating systemic risk in how organizations grant persistent OAuth access to SaaS integrations. CISOs should immediately audit all third-party OAuth and connected-app permissions within Salesforce and similar CRM platforms.

📖 Read full article

Dark Reading · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A leaked GitHub token at a global pharmaceutical leader highlights that secrets management in CI/CD pipelines remains a critical governance gap—CISOs at organizations with active software development operations should benchmark their secrets scanning posture and ensure developer credentials are treated as privileged identities, not tooling artifacts.

📖 Read full article

TechCrunch Security · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The theft of 3 million government-issued identity documents from a Texas state system is a high-severity identity data breach with downstream fraud implications for enterprise identity verification programs and HR onboarding processes that rely on driver's licenses and passports as identity proofing documents.

📖 Read full article

Help Net Security · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: The $4.2B deal consolidates three leading OT/ICS security and asset-visibility platforms under a global consulting giant, reshaping the vendor landscape for critical infrastructure security programs and signaling that OT risk has reached boardroom-level investment priority. CISOs at industrial, energy, and manufacturing enterprises need to reassess their Dragos, runZero, and NetRise roadmaps under new ownership.

📖 Read full article

The Hacker News · Jun 19 · Relevance: ██████████ 10/10

Why it matters to CISOs: Active Russian-attributed campaign compromising tens of thousands of FortiGate firewalls and VPN devices demands immediate inventory audit and credential rotation across any enterprise running Fortinet edge infrastructure. The scale—86,000+ devices—and CISA's formal warning make this an executive-level emergency requiring board communication.

📖 Read full article

Help Net Security · Jun 19 · Relevance: █████████░ 9/10

Why it matters to CISOs: Splunk Enterprise is a critical detection and logging backbone for most enterprise SOCs; an unauthenticated RCE being actively exploited with a federal patch deadline of June 21 means any organization running Splunk must treat this as an emergency patch-or-isolate decision this weekend. Full system compromise potential directly undermines an organization's ability to detect other incidents.

📖 Read full article

Alex: Welcome to Cleartext. It's Friday, June 19th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. Let's get into it.

Alex: We have a packed show today. Two critical vulnerabilities that need weekend action, a massive acquisition that reshapes the OT security landscape, a sophisticated supply chain breach that should make every CISO audit their OAuth integrations before Monday, and some meaningful law enforcement wins against the ransomware ecosystem. Let's start where the pain is most immediate.

Jordan: Yeah, let's talk about FortiBleed, because eighty-six thousand compromised FortiGate devices is not a drill. CISA put out a formal advisory yesterday directing Fortinet customers to take immediate hardening steps. The campaign is attributed to Russian-speaking threat actors, and there's a companion data leak of roughly seventy-four thousand VPN credentials floating around. If you're running Fortinet edge infrastructure, this is your weekend.

Alex: And what makes this board-level rather than just a SOC problem is the scale and the credential exposure. We're not talking about a theoretical vulnerability waiting to be exploited. These devices are already compromised. The credential dump means even if you patch the underlying issue, you've got a rotation problem. Every service account, every VPN credential that touched those appliances needs to be treated as burned.

Jordan: The attribution to Russian-speaking actors is worth noting but shouldn't change your response calculus. Whether it's state-sponsored or criminal, the remediation is the same: inventory every FortiGate device in your environment, validate firmware versions, rotate credentials, and check for persistence mechanisms. If you're a CISO and you don't have a complete inventory of your Fortinet footprint by end of day today, that's your first problem.

Alex: And the second emergency is arguably worse in a different way. CVE-2026-20253, an unauthenticated remote code execution vulnerability in Splunk Enterprise, is under active exploitation right now. CISA has given federal agencies until Sunday to apply mitigations. Sunday.

Jordan: This one is genuinely alarming because of what Splunk is. It's the detection backbone for most enterprise SOCs. If an attacker compromises your Splunk infrastructure, they don't just own a server. They own your visibility. They can manipulate logs, suppress alerts, blind your detection pipeline. It's the equivalent of someone taking out the security cameras and the alarm system simultaneously.

Alex: The indicators include path traversal sequences and anomalous PostgreSQL connections, so there are things your teams can hunt for right now. But the patch-or-isolate decision needs to happen today. If you can't patch by Sunday, isolate the instance from the internet and restrict access to trusted networks only. This is not a Monday morning conversation.

Jordan: And for the CISOs listening who are thinking about how to communicate this upward, frame it simply: our ability to detect attacks is itself under attack. That lands in the boardroom.

Alex: Let's pivot to a story that I think is going to have ripple effects across enterprise security programs for months. The Klue OAuth breach. A threat actor called Icarus exploited compromised OAuth credentials in Klue's Battlecards integration to steal Salesforce CRM data from multiple organizations. And this is reportedly the third Salesforce-connected app compromised in an ongoing extortion campaign.

Jordan: What makes this story so instructive is the cascade. One compromised OAuth credential in a third-party integration turned into CRM data theft across multiple enterprises. And one of the victims was Huntress, a cybersecurity vendor, who to their credit published a detailed post-mortem describing what they called a security domino effect. Salesforce has now disabled the Klue integration entirely.

Alex: This is a systemic architectural problem. Most enterprises have dozens, sometimes hundreds of third-party OAuth integrations into Salesforce, HubSpot, ServiceNow, you name it. Each one of those is a persistent access grant that rarely gets audited after initial approval. The Klue breach proves that your SaaS supply chain is only as strong as the weakest connected app.

Jordan: And the fact that this is the third Salesforce-connected app hit in this campaign tells you Icarus has a playbook. They're systematically targeting the integration layer. If I'm a CISO, I'm pulling a report of every OAuth grant and connected app in my Salesforce instance before the weekend. Look for apps with broad data access scopes, apps that haven't been used recently, apps from vendors you've never heard of. Revoke first, ask questions later.

Alex: The Novo Nordisk story reinforces the same theme from a different angle. A leaked GitHub token exposed their software development pipeline. Dark Reading framed it correctly: secrets management is an identity and access management problem, not a developer tooling problem. If your organization treats developer credentials as anything less than privileged identities, you have a governance gap.

Jordan: Now let's talk about a story that broke this morning that's going to reshape vendor strategy conversations for a lot of CISOs. Accenture announced it's acquiring a majority stake in Dragos plus full ownership of runZero and NetRise for four point two billion dollars.

Alex: This is significant on multiple levels. First, the dollar figure. Four point two billion for OT security and asset visibility platforms signals that operational technology risk has definitively reached boardroom investment priority. This isn't a niche anymore. Second, it consolidates three of the leading platforms in OT security, asset discovery, and firmware and software supply chain analysis under one consulting giant.

Jordan: For CISOs at industrial, energy, and manufacturing enterprises who are currently Dragos, runZero, or NetRise customers, you need to start thinking about what this means for your roadmaps. Accenture is a services company. Their incentive structure is to wrap these tools in managed services and consulting engagements. That could be great if you want a turnkey solution. It could be problematic if you've built custom integrations and want to maintain operational independence.

Alex: And the competitive dynamics shift too. Accenture just became a major OT security platform company overnight. That changes the conversation with Claroty, Nozomi, Armis, and every other player in the space. If you're in an active procurement cycle for OT visibility or ICS security, pause and reassess the landscape.

Jordan: My take is that this is a net positive signal for the market. It validates that OT security is a strategic priority, not a compliance checkbox. But the execution risk of integrating three distinct engineering cultures under Accenture is real. I'd watch the next two quarters closely before making any long-term bets on the combined platform.

Alex: Let's shift to the law enforcement side, which had a genuinely good week. Operation Endgame's takedown of Evil Corp's SocGholish botnet. A hundred and six servers seized, nearly fifteen thousand infected WordPress sites remediated.

Jordan: SocGholish has been one of the most effective initial access mechanisms in the ransomware ecosystem for years. It's a drive-by download operation. You visit a compromised website, you get a fake browser update prompt, and if someone clicks it, the malware deploys and phones home for the next stage, which is typically ransomware or a hands-on-keyboard intrusion. The infrastructure takedown is meaningful because SocGholish depended on a large distributed network of compromised WordPress sites. Cleaning fifteen thousand of those disrupts the delivery mechanism significantly.

Alex: For CISOs, the actionable takeaway is to use this moment to validate your controls. Would your web proxies and endpoint detection have blocked a SocGholish drive-by download? The answer should be yes, but verify. Run the known indicators through your detection stack. And if you've got users on unmanaged devices accessing the web without proxy coverage, that's your gap.

Jordan: The SocGholish takedown also connects to our third story about INC ransomware absorbing affiliates displaced by the LockBit and BlackCat disruptions. The ransomware ecosystem is remarkably resilient. You take out one operation, the talent migrates. INC has now claimed over eight hundred thirty victims since 2023, with accelerated growth this year specifically because it absorbed operators from disrupted groups.

Alex: If you're updating threat models or cyber insurance submissions, INC needs to be in your analysis. They've moved from a nascent operation to a top-tier RaaS threat, and their affiliate base now includes experienced operators who cut their teeth on LockBit and BlackCat campaigns. These are not amateurs.

Jordan: And the DragonForce story adds another layer of sophistication to the ransomware landscape. They're routing C2 traffic through legitimate Microsoft Teams relay infrastructure using a custom Go-based RAT called Backdoor.Turn. This is clever because it defeats network-based detection that relies on domain reputation or IP blocklists. The traffic looks like normal Teams usage.

Alex: This is a fundamental challenge for network detection and response. If your NDR strategy is primarily reputation-based, you will miss this. You need behavioral analytics that can identify anomalous patterns within legitimate platform traffic. And honestly, most organizations aren't there yet. This is a gap that needs investment.

Jordan: Briefly on the Texas breach, three million driver's licenses and passport records stolen from a state government system. The downstream implications for enterprise are real. If your organization uses driver's licenses or passports for identity proofing during onboarding or account recovery, those documents are now less trustworthy for three million people. Identity verification programs need to account for this.

Alex: Alright, looking at the week as a whole, Jordan, what's the thread you see?

Jordan: The theme is trust boundaries collapsing. FortiBleed compromises the network edge. Splunk exploitation compromises detection. The Klue breach compromises SaaS integrations. DragonForce compromises the legitimacy of collaboration platform traffic. Every layer of assumed trust in our security architectures is being tested simultaneously. The organizations that will fare best are the ones that have moved past implicit trust at any layer and are actively validating at every boundary.

Alex: I agree. And I'd add that the Accenture acquisition signals that the market is starting to price in the reality that operational technology and the physical world are now part of the same threat surface. The convergence of IT and OT security isn't a future state. It's the current state. CISOs who are still treating these as separate programs are behind.

Jordan: Next week, watch for exploitation activity around the Splunk vulnerability to intensify. The Sunday patch deadline for federal agencies means there will be a window of opportunity for attackers against organizations that don't move as fast. And keep an eye on the Icarus campaign. Three Salesforce-connected apps compromised suggests there will be a fourth.

Alex: That's our show for today. Show notes, links to every story we covered, and additional context are all at cleartext.fm. Have a good weekend, everyone, but maybe not too relaxed a weekend given what's on the board. We'll be back Monday.

Jordan: Patch your Splunk. Rotate your Fortinet credentials. Audit your OAuth grants. Then enjoy your weekend. See you Monday.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-19.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 10 stories across 4 topic areas, including: Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns; EU grants Ukraine access to cybersecurity reserve for major attacks; North Korean Hiring Fraud Runs on AI and US Laptop Farms.

The Record (Recorded Future) · Jun 17 · Relevance: █████████░ 9/10

Why it matters to CISOs: The UK NCSC CEO's public warning that nation-states are pre-positioning inside critical infrastructure — explicitly framing current intrusions as intelligence-gathering for future kinetic conflict — should inform threat modeling and board-level risk conversations for any CISO with CNI exposure.

📖 Read full article

The Record (Recorded Future) · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The EU formally integrating Ukraine into its cyber incident response reserve reflects a significant escalation in collective defense posture — CISOs at multinationals operating in or near conflict-adjacent European markets should factor this into their geopolitical risk assessments.

📖 Read full article

Infosecurity Magazine · Jun 17 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Nisos' infiltration of a North Korean IT worker fraud cell using AI-generated interview personas and US-based laptop farms underscores the sophistication of insider threat vectors CISOs must now build controls against in hiring and contractor vetting processes.

📖 Read full article

Cybersecurity Dive · Jun 17 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Iran-linked group Handala claiming an attack on one of the US's largest water utilities is a significant critical infrastructure threat indicator — CISOs in water, energy, and municipal services sectors should elevate threat monitoring and review OT network segmentation posture.

📖 Read full article

CyberScoop · Jun 18 · Relevance: █████████░ 9/10

Why it matters to CISOs: Accenture's $4.18B acquisition of Dragos, runZero, and NetRise signals a major consolidation in OT/ICS security and asset visibility — CISOs at industrial, energy, and critical infrastructure organizations need to reassess vendor relationships and competitive dynamics in this space immediately.

📖 Read full article

BankInfoSecurity · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The Gentlemen gang's industrialized EDR-killing toolkit — targeting 400+ security processes across 48 products and rapidly incorporating newly disclosed vulnerable drivers — directly threatens the endpoint detection layer most enterprises rely on as a core ransomware defense.

📖 Read full article

Help Net Security · Jun 18 · Relevance: █████████░ 9/10

Why it matters to CISOs: Nearly 74,000 Fortinet firewall and VPN gateway credentials leaked by a Russian-speaking threat group represents an immediate, actionable threat for any enterprise running Fortinet perimeter devices — credential rotation and access audits are urgent.

📖 Read full article

BleepingComputer · Jun 18 · Relevance: ████████░░ 8/10

Why it matters to CISOs: An OAuth compromise at a SaaS vendor (Klue) being weaponized to exfiltrate Salesforce CRM data across multiple organizations illustrates the cascading third-party supply chain risk inherent in SaaS ecosystems — CISOs should audit OAuth app permissions and SaaS-to-SaaS trust chains.

📖 Read full article

BankInfoSecurity · Jun 18 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A supply-chain attack poisoning a widely used AI agent framework on npm directly targets the AI development pipelines now present in most large enterprises — CISOs need to ensure AI/ML development teams are included in software supply chain security controls.

📖 Read full article

CyberScoop · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Active exploitation of FortiSandbox vulnerabilities disclosed in April — confirmed by multiple firms and originating from multiple threat actors — means unpatched Fortinet environments are under active attack right now, compounding the FortiBleed credential exposure.

📖 Read full article

Alex: Good morning. It's Thursday, June 18th, 2026. Welcome to Cleartext. I'm Alex Chen.

Jordan: And I'm Jordan Reeves.

Alex: We have a dense one today. The UK's cyber chief just said the quiet part loud about nation-state pre-positioning in critical infrastructure. Accenture dropped four billion dollars on OT security in a single morning. Fortinet is having a very bad week — credential leaks, active exploitation, all compounding at once. We've got an OAuth breach cascading through Salesforce environments, a poisoned AI framework on npm, and North Korean hiring fraud that's gotten disturbingly sophisticated. Let's get into it.

Jordan: I want to start with Richard Horne at RUSI yesterday. The NCSC CEO stood up and said that seventy-five percent of consequential cyberattacks on UK critical infrastructure are attributed to nation-state actors. That number alone is worth pausing on. But the real substance was in how he framed the threat. He said, and I'm paraphrasing closely here, that kinetic targeting in any future conflict will be based on intelligence being gathered today. He's explicitly telling operators that what looks like espionage right now is battlefield preparation.

Alex: And the framing matters enormously for how you carry this into a board conversation. This is not "we might get hit by ransomware." This is a senior government official saying adversary nations are inside your infrastructure right now, mapping it, understanding it, and planning to use that knowledge in a future conflict scenario. If you're a CISO at a utility, a telco, a transportation company, a port operator — this is the threat model you should be presenting to your board. Not theoretical. Active. Ongoing.

Jordan: He also reframed cyber defense explicitly as a contest against a shifting opponent, not as a manageable risk. That's a meaningful rhetorical shift from a Five Eyes national cyber authority. He's telling CISOs: stop treating this like a compliance exercise. Your adversary is adapting faster than your control framework.

Alex: And if you pair that with the California water utility story — Handala, an Iran-linked group, claiming an attack on one of the largest water companies in the United States — you see the pattern Horne is describing playing out in real time. Handala has a track record of destructive and disruptive attacks against Israeli and Western infrastructure. The utility says it's investigating. But the fact that an Iranian proxy group is even credibly claiming access to a major US water system should be a five-alarm signal for every OT-heavy CISO in the country.

Jordan: OT network segmentation, visibility into east-west traffic in your industrial control environments, and honest assessment of whether your IT-OT boundary is actually a boundary — those are the immediate action items. If you haven't pressure-tested your OT segmentation in the last six months, this week is your prompt.

Alex: Which brings us neatly to the Accenture story, because the market just moved. Accenture announced this morning it's acquiring Dragos, runZero, and NetRise for a combined four point one eight billion dollars. This is Accenture's first major push into operational technology security software. Dragos for ICS threat detection, runZero for asset discovery, NetRise for firmware and software supply chain analysis. Together, that's a full-stack OT security play.

Jordan: This is a consolidation event. Full stop. If you're a CISO who has contracts with any of these three companies, you need to be on the phone with your account team today. Not because the products are going to disappear overnight, but because the incentive structures just changed. Accenture is a services company. They will integrate these tools into managed offerings. Your standalone deployment model may not be the priority anymore.

Alex: And from a market dynamics perspective, this is Accenture looking at the threat landscape we just discussed — nation-state pre-positioning, critical infrastructure under siege — and placing a four-billion-dollar bet that OT security spend is about to explode. They're probably right. But for buyers, consolidation means fewer independent options. If you were evaluating competitors to Dragos or runZero, your shortlist just got shorter. Plan accordingly.

Jordan: Now let's talk about Fortinet, because they are having a compounding bad week. Story one: a Russian-speaking threat group exfiltrated credentials from the configuration files of nearly seventy-four thousand Fortinet firewalls and VPN gateways worldwide. The data was discovered by researcher Volodymyr Diachenko after the group accidentally exposed it on a server. Affected organizations reportedly include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet itself.

Alex: Let me be direct. If you run Fortinet perimeter devices, you should be treating this as a confirmed credential compromise until you can prove otherwise. Rotate every credential associated with those devices. Audit every VPN session. Check for anomalous admin access. Do it today.

Jordan: And it gets worse. Multiple security firms have confirmed active exploitation of two critical FortiSandbox vulnerabilities that Fortinet disclosed back in April. These are being hit by multiple unrelated threat actors — this isn't one campaign, it's broad opportunistic exploitation. The timing overlap with the FortiBleed credential leak is not coincidental in terms of risk. You now have attackers with stolen credentials and known unpatched vulnerabilities in the same product family. That's a convergence that leads to breaches.

Alex: If I'm sitting in a CISO chair right now and I have Fortinet in my environment, I'm escalating this to my executive team as an active incident posture, not a vulnerability management ticket. Patch the FortiSandbox boxes. Rotate the credentials. And run a threat hunt specifically looking for indicators tied to both the credential dump and the sandbox exploits. This is the kind of compound risk that slips through when you treat each advisory in isolation.

Jordan: Shifting to SaaS supply chain risk. Klue, a market intelligence platform, suffered an OAuth breach that a threat actor called Icarus weaponized to exfiltrate Salesforce CRM data from multiple downstream organizations. This is now an active extortion campaign.

Alex: This is the SaaS-to-SaaS trust chain problem that we've been warning about for years, and it's here in full bloom. An OAuth token from one vendor becomes a skeleton key into your CRM. How many of your SaaS vendors have OAuth integrations with Salesforce, with your HRIS, with your code repos? If you don't have an answer to that question, you have a blind spot that's being actively exploited right now. Audit your OAuth app permissions. Map your SaaS-to-SaaS trust relationships. Revoke anything that's over-permissioned or stale.

Jordan: And on the supply chain theme, the Mastra AI framework — widely used to build AI agents, workflows, and RAG pipelines — was poisoned via a compromised npm package. GitHub, which owns npm, told all developers to downgrade Mastra pending cleanup.

Alex: The AI development pipeline is now a supply chain attack surface, and most security teams haven't extended their software composition analysis to cover it. If your engineering teams are building with AI agent frameworks, they need to be under the same supply chain security controls as every other dependency. If they're not, fix that gap.

Jordan: Let me hit the EU-Ukraine story quickly because it matters for geopolitical context. The EU formally granted Ukraine access to its cybersecurity reserve — a pool of pre-approved incident response firms that can deploy during major attacks. This coincides with Ukraine's formal accession steps toward EU membership.

Alex: For CISOs at multinationals operating in Central or Eastern Europe, this changes the collective defense landscape. The EU is expanding its cyber defense perimeter eastward into an active conflict zone. That means the threat actors targeting Ukraine — Russian state groups, primarily — are now operating against an infrastructure that has formal EU incident response backing. It raises the stakes for everyone in that geography.

Jordan: Two more quick hits. The Gentlemen ransomware gang is industrializing EDR evasion. ESET researchers documented their GentleKiller toolkit — it targets over four hundred security processes across forty-eight endpoint products and rapidly incorporates newly disclosed vulnerable drivers. This isn't novel conceptually, but the speed of integration and the breadth of coverage make it operationally significant. If your ransomware defense depends primarily on your EDR catching everything, you need defense in depth behind it. Assume the EDR layer can be defeated.

Alex: And finally, North Korean IT worker fraud. Nisos infiltrated a fraud cell using AI-generated interview personas and a US-based laptop farm to mask the true locations of North Korean workers. This is both a financial fraud vector and a potential espionage and sabotage risk. Your hiring and contractor vetting processes need to account for this. Identity verification that goes beyond a video call, because the video call might be AI-generated. Geolocation verification of contractor devices. These are controls that didn't exist in most hiring workflows two years ago, and they need to exist now.

Jordan: Looking at the week's emerging theme, Alex, it's convergence. Nation-state pre-positioning is converging with critical infrastructure exposure. Credential leaks are converging with unpatched vulnerabilities. SaaS trust chains are converging with extortion campaigns. AI development pipelines are converging with supply chain attacks. None of these are isolated problems anymore.

Alex: Agreed. And I think the meta-lesson for CISOs this week is that risk compounds faster than most organizations can respond to it in isolation. The Fortinet situation is the clearest example — any one of those stories is serious, but together they're a crisis for affected organizations. The CISOs who are ahead of this are the ones running compound risk scenarios, not just individual vulnerability assessments. That's the capability to build.

Jordan: Watch the Accenture integration closely. Watch for follow-on exploitation tied to the FortiBleed credentials. And if you haven't mapped your SaaS OAuth trust chains, make that your weekend project.

Alex: That's our show for Thursday, June 18th. Show notes and links to every story we covered are at cleartext.fm. We'll be back tomorrow.

Jordan: Stay sharp.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-18.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 4 topic areas, including: Chinese Espionage Actor Abuses Email Rules to Steal Research Data; Risky Bulletin: China arrests Silver Fox cybercrime group suspects; Security Community Slams US Ban on Exporting Mythos, Fable.

BankInfoSecurity · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: UNC6508's compromise of REDCap environments at North American research institutions—using abused compliance email rules for covert long-term exfiltration—signals a mature, persistent Chinese espionage playbook that security leaders at universities, pharma, defense contractors, and R&D-heavy enterprises must assess against their own mail gateway and DLP controls.

📖 Read full article

Risky Business News · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The collapse of MS-ISAC membership following DHS funding cuts directly degrades the threat intelligence sharing ecosystem that many enterprise security programs depend on, while the Silver Fox arrests and Ukraine's addition to the EU Cyber Reserve signal active geopolitical maneuvering in the cyber domain.

📖 Read full article

Dark Reading · Jun 16 · Relevance: ████████░░ 8/10

Why it matters to CISOs: U.S. export controls on frontier AI models with advanced hacking capabilities set a regulatory precedent that will reshape how enterprises license, deploy, and share AI security tooling globally, and signals an escalating government role in AI capability governance that CISOs must track for compliance and vendor risk implications.

📖 Read full article

Infosecurity Magazine · Jun 17 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Ukraine's formal inclusion in the EU Cybersecurity Reserve institutionalizes a new tier of collective cyber defense that could reshape how NATO-aligned enterprises plan for geopolitical spillover incidents and supply chain disruptions tied to the Russia-Ukraine conflict.

📖 Read full article

Infosecurity Magazine · Jun 17 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A 93% year-over-year increase in employees attempting to upload sensitive data to AI models quantifies the data loss exposure created by AI adoption, giving CISOs concrete metrics to present to boards and drive urgency around AI data governance and DLP policy updates.

📖 Read full article

Cybersecurity Dive · Jun 16 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Survey data showing a direct correlation between AI adoption rates and security incident frequency provides CISOs with board-level evidence to justify investment in AI governance frameworks and to counter the narrative that AI adoption risk can be deferred.

📖 Read full article

BankInfoSecurity · Jun 17 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A $100M seed round—the largest on record for an endpoint security startup—signals significant venture conviction that traditional EDR architectures are inadequate against AI-automated attacks, and is a market signal CISOs should factor into endpoint vendor strategy reviews.

📖 Read full article

BleepingComputer · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: An unpatched local privilege escalation zero-day in Microsoft Defender—actively exploited by the Nightmare Eclipse threat actor—means enterprises cannot rely on their primary endpoint security tool to defend against local attackers, requiring immediate compensating controls and heightened monitoring until Microsoft ships a fix.

📖 Read full article

The Hacker News · Jun 17 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The compromise of 144 packages in a widely used AI application framework via a single hijacked npm contributor account is a supply chain event that directly threatens enterprises building AI-driven workflows on JavaScript/TypeScript stacks, and underscores the fragility of open-source AI toolchain security.

📖 Read full article

Alex: Welcome to Cleartext for Wednesday, June 17th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. So here's how your Wednesday is going. Your primary endpoint security tool has an actively exploited zero-day with no patch available. A hundred and forty-four packages in a popular AI development framework just got supply-chain compromised through a single hijacked account. And a Chinese espionage group has been silently forwarding your researchers' emails for months using your own compliance rules against you. Happy hump day, everyone.

Alex: We've got a packed show today. We're going to dig into that Chinese espionage campaign targeting research institutions, because the tradecraft is genuinely clever and has implications well beyond academia. We'll cover the MS-ISAC losing seventy percent of its members and what that means for collective defense. There's a significant AI governance story with real numbers that you can take to your board. We'll hit the Defender zero-day and that Mastra npm compromise with actionable guidance. And we'll touch on a hundred-million-dollar endpoint security startup that thinks EDR is dead. Let's get into it.

Jordan: Let's start with UNC6508, which is the designation Google is using for this Chinese espionage group that compromised REDCap environments at North American research institutions. REDCap, for those not in the research world, is the standard electronic data capture platform used across universities, pharma, and clinical research. It's everywhere. What makes this campaign interesting isn't the initial access. It's the exfiltration method. They abused existing compliance email rules, the kind that organizations set up for legitimate regulatory forwarding, and repurposed them to silently forward emails matching strategically relevant keywords.

Alex: This is the kind of operation that should make every CISO pause and think about their own mail infrastructure. These aren't smash-and-grab operators. UNC6508 deployed custom malware, harvested credentials, and then configured forwarding rules designed to blend in with legitimate mail flow. The campaign was architected for long-term intelligence collection. They're reading your researchers' emails about whatever topics Beijing finds strategically interesting, and your security team may never see it because the forwarding looks like business as usual.

Jordan: The defensive takeaway is concrete. When was the last time your team audited mail transport rules, especially in Exchange Online or Google Workspace? Not just user-level forwarding rules, but the admin-level compliance and journaling rules. Most organizations set those up during deployment and never look at them again. That's exactly the seam this group exploited. If you're in pharma, defense contracting, biotech, or any R&D-heavy enterprise, this is your threat model right now.

Alex: And the broader pattern here is Beijing's espionage apparatus continuing to mature. Which actually connects to our next story. Chinese authorities arrested sixty-six members of the Silver Fox cybercrime group. Now, China arresting its own cyber criminals is always worth paying attention to, because it usually signals one of two things. Either the group crossed a line domestically, or Beijing is managing its ecosystem to maintain plausible deniability between state-sponsored operations and criminal ones.

Jordan: Right. The cynical read, which is probably the correct read, is that this is housekeeping. China wants to be able to point to arrests and say, look, we police our own. Meanwhile, groups like UNC6508 continue operating with impunity because they serve state interests. But there's a practical angle too. If Silver Fox infrastructure or tooling overlapped with anything in your environment, those IOCs may go stale quickly as remaining members scatter or rebrand.

Alex: The other headline buried in the same Risky Business roundup is arguably more consequential for domestic security leaders. MS-ISAC has lost approximately seventy percent of its membership following DHS funding cuts. For listeners who rely on ISAC threat intelligence feeds, this is a direct degradation of your input sources.

Jordan: This is one of those slow-moving disasters that won't make the front page but will absolutely show up in your incident timelines six months from now. The MS-ISAC was the connective tissue for state, local, tribal, and territorial government cybersecurity. Seventy percent member loss means the collective defense model for a huge swath of the public sector just collapsed. And if you're in the private sector thinking this doesn't affect you, remember that your supply chain includes municipalities, public utilities, and state agencies that were depending on that shared intelligence.

Alex: The message for CISOs is straightforward. If you were getting value from ISAC intelligence sharing, you need to assess whether that channel is still reliable and start thinking about alternative sources or bilateral sharing arrangements now, not after the next incident.

Jordan: Switching to AI governance, because there are two stories today that, taken together, give you a very clear picture of where the risk is accumulating. First, Infosecurity Magazine reports that sensitive enterprise data upload attempts to AI models increased ninety-three percent year over year. Second, a Jamf survey found a direct correlation between AI adoption rates and security incident frequency. More AI, more incidents. Not a surprise to anyone in this audience, but now you have the data.

Alex: This is the board conversation I've been telling CISOs to prepare for all year. You now have two independent data points. Employees are uploading sensitive data to AI tools at nearly double the rate of last year, and organizations with higher AI adoption are experiencing more security incidents. That's not a coincidence. That's a causal relationship driven by governance gaps. The answer isn't to slow AI adoption. Your business won't let you. The answer is to get AI data governance into your control framework immediately. DLP policies need to account for AI endpoints. Acceptable use policies need teeth. And your board needs to understand that AI adoption without governance investment is just accelerated risk accumulation.

Jordan: And this dovetails with the export control story, which is a different dimension of AI governance but equally important. The Trump administration imposed export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models, citing advanced offensive cyber capabilities. Dozens of security researchers signed an open letter demanding the restrictions be reversed, arguing that these models are critical for defensive security research.

Alex: This is a genuinely hard policy problem. These models apparently have capabilities that concern national security officials, and I'm not going to second-guess the intelligence assessment behind the decision. But the security community's concern is legitimate. If your red team or your threat intelligence analysts are using these models for defensive work, and now your overseas offices or partners can't access them, that's an operational impact you need to map. More broadly, this signals an escalating government role in AI capability governance. CISOs should be tracking these export controls the same way they track sanctions lists. It affects vendor relationships, licensing, and how you deploy AI tooling across global operations.

Jordan: Let's pivot to the two vulnerability stories, because both require action. CVE-2026-50656 is a local privilege escalation zero-day in Microsoft Defender. It's being actively exploited by a threat actor group called Nightmare Eclipse using an exploit called RoguePlanet. No patch is available. Microsoft says they're working on it. The vulnerability requires local authenticated access and no user interaction, which means any compromised user account or insider threat can escalate to system-level privileges on endpoints running Defender.

Alex: The irony of your endpoint security product being the attack vector is not lost on anyone. Practically speaking, you need compensating controls. Increase monitoring on privilege escalation events. If you have application control or allowlisting capabilities separate from Defender, lean on those. Review your endpoint hardening baselines. And have a conversation with your Microsoft account team about timeline, because "working on it" isn't a patch date.

Jordan: The second vulnerability story is a supply chain compromise. A hundred and forty-four npm packages under the Mastra namespace were hijacked through a single compromised contributor account. Mastra is a popular open-source framework for building AI applications in JavaScript and TypeScript. Five independent security firms confirmed the compromise, which tells you the blast radius is significant.

Alex: If your engineering teams are building AI-driven workflows on JavaScript or TypeScript stacks, you need to check your dependency trees today. This is the software supply chain fragility problem that the industry has been talking about for years, and it keeps happening because the open-source ecosystem still relies on individual contributor accounts as single points of failure. SBOMs, dependency scanning, and contributor account security aren't nice-to-haves. They're baseline requirements.

Jordan: Quick hit on the startup front. Ent emerged from stealth with a hundred million dollar seed round, which is the largest seed round on record for an endpoint security company. They're positioning intent-aware AI running on-device as a replacement for traditional EDR, arguing that detection-and-response architectures can't keep up with AI-automated attacks.

Alex: A hundred million at seed is a market signal, not just a company story. Venture capital is making a big bet that the EDR paradigm is insufficient. Whether Ent specifically delivers is an open question, but if you're in the middle of an endpoint security vendor review, this thesis deserves a seat at the evaluation table.

Jordan: And finally, Ukraine's formal inclusion in the EU Cybersecurity Reserve. First non-EU member state admitted to the program. This institutionalizes collective cyber defense in a way that has real implications for NATO-aligned enterprises.

Alex: It's a meaningful geopolitical signal. The EU is essentially extending its cyber incident response umbrella to a non-member state in an active conflict zone. For enterprises with operations or supply chain dependencies in Eastern Europe, this changes the calculus on geopolitical spillover risk. There's now a formal mechanism for EU cyber response resources to flow into Ukraine during major incidents, which could contain some of the collateral damage we've worried about since 2022.

Jordan: So zooming out, Alex, the theme I'm seeing today is that the seams are the targets. Email compliance rules, npm contributor accounts, the gap between AI adoption speed and governance maturity, the collapse of collective defense sharing. Adversaries, whether state-sponsored or criminal, are exploiting the spaces between your controls, not the controls themselves.

Alex: Completely agree. And for CISOs, the actionable insight is that your risk isn't in the technologies you've deployed. It's in the assumptions you made when you deployed them. That your mail rules are only used legitimately. That your open-source dependencies are maintained by trustworthy individuals. That AI adoption would wait for governance to catch up. Today's stories are a reminder to go back and stress-test those assumptions, because your adversaries already have.

Jordan: Well said. That's your Wednesday briefing.

Alex: Thanks for listening to Cleartext. Show notes and links to every story we covered today are at cleartext.fm. We'll be back tomorrow. Stay sharp.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-17.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 9 stories across 4 topic areas, including: Google exposes China espionage group that’s been lurking in networks undetected since 2023; Cybersecurity vets protest ‘dangerous’ US government ban on Anthropic’s most powerful models; Cyberattack on Russian tech firm Astral disrupts business, government services for week.

CyberScoop · Jun 15 · Relevance: █████████░ 9/10

Why it matters to CISOs: A Chinese APT group (UNC6508) maintained undetected persistence in North American medical, academic, and military research networks for over a year by compromising REDCap servers and hijacking Google Workspace email rules—a TTPs pattern CISOs at research institutions and defense contractors must immediately assess against their own environments.

📖 Read full article

TechCrunch Security · Jun 15 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The Trump administration's export-control restrictions on Anthropic's Fable and Mythos AI models directly limit defenders' access to frontier AI security tooling, creating a strategic asymmetry that CISOs must factor into their AI-assisted security program roadmaps.

📖 Read full article

The Record (Recorded Future) · Jun 15 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A sustained cyberattack on a major Russian technology provider disrupted critical business and government services for a week, illustrating how attacks on shared infrastructure platforms cascade across dependent organizations—a supply chain risk model relevant to CISOs assessing third-party concentration risk.

📖 Read full article

BleepingComputer · Jun 16 · Relevance: ████████░░ 8/10

Why it matters to CISOs: DragonForce ransomware's use of Microsoft Teams TURN relay infrastructure to blend C2 traffic with legitimate Microsoft communications is a first-of-kind evasion technique that will defeat most network-based detection tools, requiring CISOs to reassess whether Teams traffic is being adequately monitored.

📖 Read full article

BleepingComputer · Jun 15 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: ShinyHunters targeting the Council of Europe—a major intergovernmental institution—demonstrates that high-profile extortion groups are escalating to politically sensitive targets; CISOs at international organizations, NGOs, and government-adjacent entities should reassess their exposure to this threat actor.

📖 Read full article

Dark Reading · Jun 15 · Relevance: ████████░░ 8/10

Why it matters to CISOs: With SEC disclosure rules and board accountability frameworks in force, CISOs facing organizational pressure to suppress security incident information face direct personal legal and regulatory exposure—this survey data provides critical ammunition for pushing back on executive pressure.

📖 Read full article

Help Net Security · Jun 16 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: ENISA's SBOM Adoption State of Play 2026 report signals that the EU Cyber Resilience Act's December 2027 deadline is creating real compliance urgency; CISOs at organizations selling into EU markets need to assess current SBOM tooling maturity and vendor obligations now.

📖 Read full article

The Hacker News · Jun 15 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The 'SearchLeak' vulnerability chain in Microsoft 365 Copilot Enterprise Search required only a single click on a legitimate microsoft.com URL to exfiltrate emails, files, and MFA codes—bypassing standard phishing defenses—making this a critical review point for any enterprise running M365 Copilot at scale.

📖 Read full article

The Hacker News · Jun 16 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Active exploitation of three FortiSandbox vulnerabilities—including a CVSS 9.1 path traversal flaw—is especially dangerous because FortiSandbox feeds threat verdicts to other Fortinet products that enforce blocking decisions, meaning a compromise could neutralize an organization's entire Fortinet security stack.

📖 Read full article

Alex: Welcome to Cleartext for Tuesday, June 16th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. So a Chinese espionage group has been sitting inside North American medical, academic, and military research networks since 2023, stealing emails by hijacking Google Workspace forwarding rules, and nobody noticed until Google itself pulled the thread this year. Three years of dwell time against targets with direct national security implications. That's where we're starting today.

Alex: Yeah, we've got a packed show. That UNC6508 revelation from Google is our lead. We're also covering DragonForce ransomware doing something genuinely novel with Microsoft Teams infrastructure, a Copilot vulnerability chain that should concern every M365 shop, Fortinet FortiSandbox flaws under active exploitation, the growing fight over AI export controls and what it means for defenders, and a survey that confirms what most of us already knew: CISOs are being pressured to bury bad news. Plus, SBOM compliance deadlines are getting real. Let's get into it.

Jordan: So UNC6508. Google's Mandiant team published this yesterday, and the sophistication here isn't in the malware. It's in the patience and the targeting. Initial access came through stolen REDCap credentials. For those not in the research world, REDCap is a web application used extensively across medical and academic research institutions for managing clinical trial data, survey data, sensitive research datasets. It's everywhere in that space, and it's often managed by research IT teams, not security teams.

Alex: That's the critical point. REDCap instances are frequently stood up by departments, sometimes outside central IT governance. They hold extraordinarily sensitive data, and they're often not subject to the same security controls as enterprise systems. If you're a CISO at a research university or a medical center, this is your shadow IT problem manifesting as an espionage vector.

Jordan: Once inside, UNC6508 moved to Google Workspace and set up email forwarding rules to silently exfiltrate communications. This is a technique we've seen before from Chinese groups, but the combination with REDCap targeting is new and deliberate. They weren't after random corporate email. They wanted research communications, grant proposals, collaboration threads between institutions, data that maps to China's stated strategic priorities in biotech and defense research.

Alex: The dwell time is what should keep people up at night. 2023 to 2026. And the detection didn't come from any of the victim organizations. It came from Google observing anomalous Workspace behavior at scale. That raises a hard question: how many CISOs at research institutions have the visibility to detect email rule manipulation across their Workspace tenants? If you're running Google Workspace, you need to be auditing forwarding rules and delegated access systematically. Today.

Jordan: And if you're a defense contractor or a subcontractor working with any of these research institutions, your third-party risk assessment just got a new scenario to model. The research collaboration pipeline is now a confirmed espionage attack surface.

Alex: Let's pivot to something that's going to affect every enterprise running Microsoft 365. DragonForce ransomware has developed a genuinely novel evasion technique. Jordan, walk us through this.

Jordan: DragonForce deployed custom malware that Symantec is calling Backdoor.Turn. What it does is obtain an anonymous Microsoft Teams visitor token and then tunnel command-and-control traffic through Microsoft's own TURN relay infrastructure. TURN relays are the servers that handle media routing for Teams calls and meetings. So the C2 traffic looks identical to legitimate Teams communications. Same destinations, same ports, same traffic patterns.

Alex: This is a detection architecture problem, not a signature problem. Most organizations treat Microsoft traffic as trusted. They're not doing deep inspection on Teams communications because of performance, privacy, and the sheer volume. DragonForce is exploiting that trust assumption.

Jordan: Exactly. Your SIEM sees traffic going to Microsoft relay servers. Your firewall sees traffic going to Microsoft relay servers. Your SOC analyst sees traffic going to Microsoft relay servers. Nobody raises an eyebrow. The only way to catch this is behavioral analysis at the endpoint level or anomaly detection on the specific patterns of TURN relay usage, and that requires tooling most shops don't have tuned for this scenario.

Alex: So the action item here is straightforward but not easy. If you're running Microsoft Teams at enterprise scale, you need to understand your baseline TURN relay traffic patterns. You need to work with your detection engineering team to build analytics around anomalous TURN token generation, particularly anonymous tokens. And you need to pressure Microsoft on what additional telemetry they can provide. This technique will be copied.

Jordan: It's already being copied, guaranteed. When a technique this elegant shows up in one group's playbook, it proliferates within weeks.

Alex: Staying in the Microsoft ecosystem, the SearchLeak vulnerability chain in Microsoft 365 Copilot Enterprise Search is worth attention. Varonis found three bugs that chain together into a one-click exfiltration path. The attack link points to a legitimate microsoft.com domain, which means it sails right past URL filtering and anti-phishing controls. One click, and the attacker gets access to emails, calendar entries, indexed files, and MFA codes.

Jordan: The MFA code exposure is the part that should elevate this for everyone. We've spent years training users and building controls around phishing links to malicious domains. This attack uses a real Microsoft domain. Your users did the right thing, they checked the URL, and they still got compromised.

Alex: If you're running Copilot Enterprise Search, verify your patch status immediately. Microsoft has addressed this, but given how rapidly Copilot has been deployed across enterprises in the last year, there are going to be environments where patching has lagged. This is also a strategic conversation about the attack surface expansion that comes with AI copilot features. Every new capability is a new attack surface.

Jordan: Moving to Fortinet. Three FortiSandbox vulnerabilities under active exploitation, including CVE-2026-39813, a CVSS 9.1 path traversal flaw. One of these was patched only last week, and threat intelligence firm Defused is already seeing exploitation in the wild. They even noted what they called a vibecoded exploit for one of the flaws, meaning someone used an AI coding assistant to generate a working exploit.

Alex: The systemic risk here is what matters. FortiSandbox isn't just a standalone product. It feeds threat verdicts to FortiGate firewalls, FortiMail, FortiClient. If an attacker compromises FortiSandbox, they can manipulate those verdicts and effectively blind your entire Fortinet security stack. Malicious files get marked clean. Malicious URLs get marked safe. Your automated blocking decisions become attacker-controlled.

Jordan: If you're a Fortinet shop, this is a drop-everything priority. Patch FortiSandbox, verify the integrity of your existing sandbox verdicts, and validate that your other Fortinet products haven't been fed poisoned intelligence. The vibecoded exploit angle is worth noting because it confirms what we've been saying for months: AI is compressing the time from patch to exploit. The window is shrinking.

Alex: Let's shift to governance and policy. Two stories that are deeply connected. First, the open letter from dozens of cybersecurity veterans and CISOs protesting the White House's export-control restrictions on Anthropic's Fable and Mythos models. Jordan, you've been tracking this.

Jordan: This is a genuinely consequential policy fight. The administration placed export controls on Anthropic's frontier models, ostensibly to prevent adversary access to advanced AI capabilities. The problem, and it's a fundamental one, is that these same models were being used extensively for defensive security research. Vulnerability analysis, code auditing, threat modeling. The controls restrict defenders' access to the best available tools while doing essentially nothing to limit adversary access, because comparable capabilities exist through other channels.

Alex: I've talked to several CISOs who signed that letter. Their frustration is real and specific. They were integrating these models into their vulnerability management programs, their AppSec pipelines, their threat intelligence workflows. Now they're facing a capability gap that their adversaries don't share. If you're building an AI-assisted security program, you need to be scenario-planning around regulatory restrictions on your tooling. This isn't theoretical anymore. It's happening.

Jordan: The deeper issue is that policymakers are applying Cold War-era export control logic to software that doesn't respect borders the same way hardware does. You can restrict chip exports. Restricting model access when the weights or equivalent capabilities are available through dozens of channels internationally, that's a different proposition.

Alex: The second governance story is the Dark Reading survey confirming that a majority of CISOs report pressure from business leaders to delay or minimize disclosure of security incidents. I want to be direct about this. If you are a CISO in 2026 and you are suppressing or delaying material incident disclosure because your CEO or your general counsel asked you to, you are personally exposed. The SEC rules are clear. The liability framework is clear.

Jordan: And this survey data is actually useful ammunition. If you're a CISO pushing back on executive pressure, you can now point to industry-wide data showing this is a systemic problem, not a personality conflict. It reframes the conversation from "you're being difficult" to "this is a known governance risk that regulators are actively watching."

Alex: Document everything. Every conversation where you're asked to delay or minimize. Every recommendation you make and every response you receive. This is professional self-preservation, and it's also the right thing to do for your organization.

Jordan: Quick hit on the ENISA SBOM report. The EU Cyber Resilience Act requires manufacturers to create, maintain, and provide SBOMs by December 2027. ENISA's data shows larger organizations are building the tooling and processes. Mid-size enterprises are behind. If you sell into EU markets and you haven't started your SBOM program, eighteen months is less time than you think.

Alex: Especially because SBOM maturity isn't just a tooling problem. It requires changes to your development practices, your vendor management, your procurement contracts. Starting now is already arguably late.

Jordan: Two quick notes on remaining stories. ShinyHunters claiming a breach of the Council of Europe, which is under investigation. The pattern of extortion groups targeting intergovernmental institutions continues to escalate. And the Astral attack in Russia, a technology provider whose compromise cascaded across business and government services for a week, is a textbook case study in third-party concentration risk. If one vendor going down takes your operations offline for a week, you have a single point of failure that belongs on your risk register.

Alex: Looking ahead, the theme I see emerging this week is the erosion of trust assumptions. Trusted Microsoft domains used for exfiltration. Trusted Microsoft relay infrastructure used for C2. Trusted security products like FortiSandbox being turned against the defender. Trusted SaaS platforms like Google Workspace being weaponized for espionage. The perimeter between trusted and untrusted has never been less meaningful.

Jordan: And the policy environment is making it harder, not easier. When your government restricts your access to the best defensive AI tools while adversaries operate without those constraints, the asymmetry compounds. CISOs are being asked to defend an expanding attack surface with a shrinking trust model and an increasingly constrained toolkit. That's the strategic reality heading into the second half of 2026.

Alex: Agreed. The organizations that will navigate this well are the ones investing in detection engineering, in behavioral analytics, in zero-trust architectures that don't rely on implicit trust of any traffic source, even Microsoft's own infrastructure.

Jordan: And the CISOs who will survive personally are the ones documenting their risk decisions, pushing back on suppression pressure, and building relationships with their boards that are based on transparency, not comfortable fiction.

Alex: That's our show for today. Show notes and links to every story we covered are at cleartext.fm. I'm Alex Chen.

Jordan: I'm Jordan Reeves. We'll see you tomorrow.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-16.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.

Daily cybersecurity briefing for CISOs and security leaders.

🎧 Listen to this episode

Today's episode covers 17 stories across 4 topic areas, including: FBI takes down massive China-based cybercrime network that caused $1.9B in losses; U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals; Russian national charged in connection with Void Blizzard espionage campaign.

CyberScoop · Jun 12 · Relevance: █████████░ 9/10

Why it matters to CISOs: The Outsider Enterprise takedown reveals how Chinese cybercrime operations now weaponize enterprise AI tools (Gemini) at industrial scale against U.S. targets — a model that will be replicated; CISOs should brief boards on AI-enabled fraud as a systemic, not marginal, risk.

📖 Read full article

The Hacker News · Jun 13 · Relevance: █████████░ 9/10

Why it matters to CISOs: An emergency government order forcing Anthropic to disable its most advanced AI models for all foreign nationals — issued with less than an hour's notice — signals that AI model access controls are now a live national-security instrument; CISOs deploying frontier AI must model regulatory interruption as an operational risk.

📖 Read full article

CyberScoop · Jun 11 · Relevance: ████████░░ 8/10

Why it matters to CISOs: The Void Blizzard indictment confirms Kremlin-directed espionage compromised at least 11 U.S. companies, reinforcing that Russian state actors continue broad corporate IP theft campaigns beyond Ukraine-focused operations.

📖 Read full article

The Hacker News · Jun 12 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Velvet Ant's PAM/OpenSSH backdoor — surviving multiple incident-response cycles over nearly a decade — is a masterclass in persistence that should force CISOs to add integrity monitoring of authentication subsystems to their threat model, not just endpoint and network layers.

📖 Read full article

Help Net Security · Jun 12 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: The AudiA6 takedown removes a key financial rail used by multiple ransomware groups, temporarily disrupting their monetization pipeline — CISOs should monitor for retaliatory or displacement attacks as groups scramble to rebuild laundering capacity.

📖 Read full article

The Hacker News · Jun 08 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: NSO Group violating a federal court injunction to launch new WhatsApp spearphishing campaigns confirms that commercial spyware vendors remain an active threat even under legal restraint — executives and board members using consumer messaging apps remain credible targets.

📖 Read full article

BleepingComputer · Jun 12 · Relevance: ████████░░ 8/10

Why it matters to CISOs: A breach of France's sovereign encrypted messaging platform — built specifically to protect government communications — underscores that bespoke, government-controlled secure comms tools carry their own unique attack surface and cannot be assumed safe by default.

📖 Read full article

The Hacker News · Jun 09 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Attackers compromising 73 Microsoft open-source GitHub repositories to inject infostealers targeting AI developers represents a direct supply chain threat to any enterprise consuming Azure or Microsoft AI tooling via those repos — a trust model that demands immediate third-party code provenance review.

📖 Read full article

BleepingComputer · Jun 12 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: A breach of clinical trials data at the world's largest insulin producer raises immediate concerns about proprietary pharmaceutical research theft and patient privacy obligations under HIPAA and GDPR — a dual regulatory exposure that life sciences CISOs must model explicitly.

📖 Read full article

CyberScoop · Jun 10 · Relevance: █████████░ 9/10

Why it matters to CISOs: BOD 26-04 collapses the federal patching window to as little as three days for highest-risk vulnerabilities, establishing a precedent that will reshape enterprise patch-management benchmarks and likely influence regulatory expectations across sectors.

📖 Read full article

CyberScoop · Jun 09 · Relevance: ████████░░ 8/10

Why it matters to CISOs: Anthropic's decision to ship two versions of the same frontier model — one with cyber-offense safeguards stripped for vetted security teams — establishes a new industry template for dual-use AI access control that CISOs must understand for both procurement and risk assessment purposes.

📖 Read full article

The Record (Recorded Future) · Jun 12 · Relevance: ████████░░ 8/10

Why it matters to CISOs: South Korea's record $409M fine for Coupang's breach of 30 million customers — surpassing its own record set against SK Telecom this year — signals that Asia-Pacific regulators are now competing with GDPR in enforcement severity; multinationals must calibrate their risk exposure accordingly.

📖 Read full article

TechCrunch Security · Jun 08 · Relevance: ██████░░░░ 6/10

Why it matters to CISOs: Massachusetts joining the growing roster of state-level comprehensive privacy laws — with a specific ban on precise location data sales — adds another compliance jurisdiction for enterprises with U.S. operations, accelerating pressure for a federal standard.

📖 Read full article

The Hacker News · Jun 11 · Relevance: ██████████ 10/10

Why it matters to CISOs: An unpatched, actively exploited RCE zero-day in Oracle PeopleSoft has compromised 100+ organizations — predominantly universities — with ShinyHunters demanding ransoms; any enterprise running PeopleSoft must treat this as an emergency patch and incident-response priority.

📖 Read full article

The Hacker News · Jun 10 · Relevance: █████████░ 9/10

Why it matters to CISOs: The largest Patch Tuesday on record — driven in part by AI-accelerated vulnerability discovery — signals that enterprise patch management workflows built for a monthly cadence are now structurally inadequate; CISOs must re-evaluate SLAs and automation capacity immediately.

📖 Read full article

Help Net Security · Jun 12 · Relevance: █████████░ 9/10

Why it matters to CISOs: Public PoC release for an auth-bypass in Check Point Remote Access VPN — already exploited by a Qilin ransomware affiliate since early May — dramatically widens the attacker pool; any organization with unpatched Check Point VPN deployments faces imminent mass exploitation.

📖 Read full article

The Hacker News · Jun 12 · Relevance: ███████░░░ 7/10

Why it matters to CISOs: Mass compromise of 400+ AUR packages delivering a Rust-based credential stealer and eBPF rootkit demonstrates that developer-facing package repositories remain a high-leverage, low-detection supply chain attack vector — enterprises using Arch Linux in developer environments should treat this as an active incident.

📖 Read full article

Jordan: If I had to pick one word for this week, it's "acceleration." Everything got faster — AI-generated phishing at industrial scale, a record-breaking Patch Tuesday driven by AI vulnerability discovery, a government order to kill frontier AI access with less than an hour's notice, and a new federal patching directive that gives you three days to fix the worst bugs. The clock is compressing on every axis, and if your security program was built for a monthly cadence, this was the week that model broke.

Alex: Welcome to Cleartext, the Saturday Week in Review. I'm Alex Chen, alongside Jordan Reeves. If you couldn't keep up this week, here's what mattered and what it means. We've got four big themes to work through. First, the AI acceleration loop — how artificial intelligence is simultaneously supercharging attackers, defenders, vulnerability discovery, and government intervention, all at once. Second, the geopolitical enforcement wave — a remarkable cluster of takedowns, indictments, and disruptions from the FBI, Europol, and DOJ. Third, a vulnerability landscape that is actively on fire, with zero-days being exploited in PeopleSoft, Check Point VPN, and supply chains. And fourth, the governance and regulatory ratchet — from CISA's new patching directive to record fines in South Korea to new state privacy laws. Let's get into it.

Jordan: So let's start with AI, because it was genuinely the throughline of the entire week. The Outsider Enterprise takedown was the headline — FBI and Google jointly dismantling a China-based phishing-as-a-service network that caused $1.9 billion in losses. But the detail that matters is how they did it. They used Google's Gemini to generate phishing content at industrial scale. Two and a half million smishing texts in a two-week window. Over 9,000 fake websites. A million fraudulent URLs. This is not artisanal social engineering. This is a factory.

Alex: And that's the part I want CISOs to really internalize. We've been talking about AI-enabled phishing as a future risk for two years. This week, the FBI quantified it at $1.9 billion in actual losses. That's the number you bring to your board. AI-powered fraud is not a theoretical risk. It is a systemic, proven, billion-dollar attack model. And it's going to be replicated, because the playbook is now public.

Jordan: And the AI story didn't stop at the attacker side. Anthropic had a wild week. They released Claude Fable 5 for the public and Mythos 5 — the same model with cyber-offense guardrails stripped — for vetted security organizations. Legitimate security researchers had been complaining that Fable 5's safety classifiers were too restrictive for offensive work, which is a real operational problem. So Anthropic created this dual-track access model. And then on Friday evening, the U.S. government dropped an emergency order forcing Anthropic to disable both models for all foreign nationals with less than an hour's notice.

Alex: This is unprecedented. A commercial AI company receiving a government order at 5:21 p.m. on a Friday to immediately cut off access to its most advanced models. No advance warning to users. Anthropic said it would "abruptly disable" them. If you are a CISO who has deployed frontier AI models in production workflows, this week just handed you a new risk category: regulatory interruption of AI model availability. You need to model that. You need contingency plans for the scenario where a model you depend on goes dark with zero notice.

Jordan: And the dual-model approach itself is worth watching. Anthropic essentially said, "Here's the safe version, and here's the version without the safety rails for people we trust." That's a template other AI companies will follow. It also means CISOs need to understand the procurement implications — which version are you getting, what access controls govern the more capable version, and what happens when your red team needs Mythos-level capability but your compliance team needs Fable-level guardrails.

Alex: The third AI angle this week was on the vulnerability discovery side. Microsoft's Patch Tuesday hit 206 CVEs — an all-time record. Thirty-nine critical, fifty-six remote code execution flaws. Security analysts directly attributed the volume surge to AI-assisted vulnerability research accelerating discovery on both sides. AI is finding bugs faster, which means both Microsoft and attackers are operating on compressed timelines. CISA explicitly cited AI-enabled exploitation speed as the primary driver behind their new Binding Operational Directive 26-04, which collapses patching windows to three days for the highest-risk vulnerabilities. The entire tempo of the game just shifted.

Jordan: Let's pivot to the geopolitical enforcement wave, because this was a remarkably active week for law enforcement. You had the Outsider Enterprise takedown, which we just covered. You had Europol, FBI, and partner agencies seizing AudiA6 — a dark web crypto laundering service that processed over €336 million for ransomware groups between 2022 and 2025. The same operators ran the Dark2Web cybercrime forum, so this was a vertically integrated criminal enterprise that provided both the marketplace and the financial plumbing.

Alex: The AudiA6 takedown is operationally significant because it disrupts monetization infrastructure. Every time you remove a trusted laundering rail, ransomware groups have to scramble to rebuild those relationships. There's a window of disruption. But I'd also flag the displacement risk — when you squeeze the monetization pipeline, some groups get more aggressive, not less. CISOs should be watching for upticks in extortion pressure over the next few weeks.

Jordan: We also got the Void Blizzard indictment — Denis Obrezko charged with orchestrating Kremlin-linked cyber espionage that compromised at least eleven U.S. companies. This is the first public individual attribution for Void Blizzard, and it's a reminder that Russian state cyber operations targeting corporate IP haven't slowed down just because the geopolitical spotlight is on Ukraine. These are broad corporate espionage campaigns, and they're ongoing.

Alex: And rounding out the geopolitical picture, Meta filed a federal contempt order against NSO Group for launching new WhatsApp spearphishing campaigns in violation of a permanent court injunction. NSO Group is literally under a court ban and they're still going. If you have executives or board members using consumer messaging apps, they remain credible targets for commercial spyware. That risk hasn't diminished.

Jordan: The Velvet Ant story deserves a beat too. Sygnia disclosed that a China-nexus group backdoored PAM and OpenSSH components — the Linux login subsystem itself — and persisted on a network with no internet connectivity for close to a decade. They survived multiple incident response cycles because cleanup focused on applications and files, not authentication infrastructure. Nearly ten years. On an air-gapped network.

Alex: That story should be genuinely unsettling for anyone who assumes their remediation efforts were thorough. If your IR playbook doesn't include integrity verification of authentication subsystems — PAM modules, SSH binaries, the things that decide who's allowed to log in — you have a blind spot that a nation-state adversary has already exploited for a decade.

Jordan: Now let's talk about the vulnerability landscape, which was exceptionally hot this week. The biggest fire is CVE-2026-35273 — an unauthenticated remote code execution zero-day in Oracle PeopleSoft. ShinyHunters, tracked by Mandiant as UNC6240, exploited this starting May 27th. Oracle didn't publish its advisory until June 10th. In that two-week gap, ShinyHunters hit over 100 organizations, about two-thirds of them universities, stole gigabytes of data, and are actively extorting victims.

Alex: If you run PeopleSoft, this is an emergency. Assume data exfiltration occurred before the patch was available. This is not a patch-and-move-on situation. This is a patch, investigate, and prepare-for-extortion situation. Higher education was the primary target, but PeopleSoft runs in a lot of enterprises for HR and finance. Check your exposure today if you haven't already.

Jordan: The Check Point VPN flaw, CVE-2026-50751, is the other critical one. Authentication bypass in Remote Access VPN, CVSS 9.3. Check Point patched June 8th, but WatchTowr published the full technical analysis and a detection artifact generator on June 12th. That means the barrier to exploitation just dropped to near zero. A Qilin ransomware affiliate was already confirmed in at least one breach. CISA gave federal agencies three days to patch. If you have Check Point VPN in your environment, you're in a race.

Alex: And the supply chain attacks continued. Microsoft's Miasma incident — 73 of their open-source GitHub repositories for Azure and AI tools were compromised to inject credential-stealing malware targeting developers. Some repos are still offline. Then separately, over 400 Arch Linux AUR packages were hijacked to deploy a Rust-based infostealer and eBPF rootkit targeting developer credentials. Two different supply chain attacks in the same week, both targeting developer environments, both going after credentials and access tokens. The developer workstation is the new high-value target.

Jordan: And on breaches — France's Tchap messenger, which was built specifically as a sovereign secure communications platform for government employees, was breached. Seventy-three thousand accounts compromised. The irony is thick. You build a bespoke encrypted platform to avoid the risks of commercial messaging apps, and then that platform itself becomes the attack surface. Sovereign tech is not inherently more secure. It's differently vulnerable.

Alex: Novo Nordisk also disclosed a breach of clinical trials data. The world's largest insulin producer, dealing with unauthorized access to patient information from clinical trials. That's a dual-risk scenario — patient privacy obligations under both HIPAA and GDPR, plus potential theft of proprietary pharmaceutical R&D. Life sciences CISOs need to model that explicitly.

Jordan: Let's wrap with the governance and regulatory segment. CISA's BOD 26-04 is the one that reshapes the operational landscape. Risk-tiered remediation timelines replacing the old blanket fourteen-day window. If a vulnerability hits all four criteria — active exploitation, internet-facing, critical asset, high CVSS — you have three days. CISA was explicit: AI-enabled exploitation speed means defenders cannot take weeks to patch.

Alex: This is a federal directive, but the ripple effects will reach every sector. Insurance carriers, auditors, and regulators will calibrate their expectations against this benchmark. If CISA says three days for the worst vulnerabilities, your board is going to ask why your SLA is fourteen. And honestly, they should.

Jordan: South Korea fined Coupang $409 million for a breach affecting 30 million customers. That's the largest data breach penalty in Korean history, and it dwarfs the $88.8 million they hit SK Telecom with earlier this year. APAC regulators are now competing with GDPR on enforcement severity. And Massachusetts passed a comprehensive privacy law banning the sale of precise location data, adding another jurisdiction to the U.S. patchwork.

Alex: So stepping back — what defined this week? Jordan, you said it at the top. Acceleration. AI is compressing timelines everywhere simultaneously. Attackers are generating phishing at machine scale. Vulnerability researchers — both good and bad — are finding bugs faster than organizations can patch them. Governments are issuing emergency orders with less than an hour's notice. Regulators are collapsing patching windows from weeks to days. And the response capacity of most security programs was designed for a slower world.

Jordan: The uncomfortable truth is that a lot of enterprise security is still operating on monthly patch cycles, quarterly risk reviews, annual threat model updates. And every single story this week — from the PeopleSoft zero-day to the Anthropic shutdown to the 206-CVE Patch Tuesday — is telling you that cadence is no longer sufficient. The adversary operates continuously. The regulators are moving toward continuous. Your program has to get there too.

Alex: For next week, keep your eye on three things. One, the fallout from the Anthropic model suspension — what does the government do next, and does this set a precedent for other AI providers? Two, mass exploitation of the Check Point VPN flaw now that the PoC is public. And three, watch for displacement attacks from ransomware groups whose laundering infrastructure just got seized. When you squeeze one part of the pipeline, pressure shows up somewhere else.

Jordan: That's the week. The daily show is back Monday. Show notes and links to every story we covered are at cleartext.fm.

Alex: Thanks for listening to Cleartext. Have a good weekend, and patch your Check Point boxes before Monday.

Cleartext is an automated daily podcast for CISOs and security leaders. Generated 2026-06-13.

Sources are pulled from: CyberScoop, The Record, SecurityWeek, Krebs on Security, Dark Reading, Cybersecurity Dive, BleepingComputer, Wired, Ars Technica, TechCrunch, Help Net Security, VentureBeat, Risky Business News, The Hacker News, CISA, and BankInfoSecurity.